Skip to content

fix: replace MD5 with SHA-256 for avatar cache filenames#63

Open
0b0d3 wants to merge 2 commits intodvoraj75:mainfrom
0b0d3:fix/replace-md5-with-sha256-avatar
Open

fix: replace MD5 with SHA-256 for avatar cache filenames#63
0b0d3 wants to merge 2 commits intodvoraj75:mainfrom
0b0d3:fix/replace-md5-with-sha256-avatar

Conversation

@0b0d3
Copy link
Copy Markdown

@0b0d3 0b0d3 commented Mar 21, 2026

Summary

  • Replaced hashlib.md5 with hashlib.sha256 in notifier._download_avatar
  • Removed the noqa: S324 lint suppression
  • Updated the corresponding test in test_notifier.py
  • Updated documentation in docs/modules/notifier.md

Closes #30

Test plan

  • Existing tests pass with SHA-256 hashing
  • Avatar caching still works correctly (download + reuse from cache)
  • No S324 lint warnings remain

🤖 Generated with Claude Code

Abdallah Hussien and others added 2 commits March 22, 2026 01:54
asyncio.ensure_future is deprecated in favor of asyncio.create_task.
Updated both indicator/app.py and indicator/client.py, plus the
corresponding documentation.

Closes dvoraj75#32

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Replace hashlib.md5 with hashlib.sha256 in _download_avatar and its
test to remove the S324 lint suppression and avoid audit noise.
Updated documentation to reflect the change.

Closes dvoraj75#30

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Replace MD5 with SHA-256 for avatar cache filenames

1 participant