Merge pull request #40478 from eugeneius/undeprecate_use_sha1_digests

Improve config.active_support.use_sha1_digests deprecation message

activesupport/CHANGELOG.md

@@ -60,6 +60,12 @@
 
     *Adrianna Chang*
 
+*   Allow the digest class used to generate non-sensitive digests to be configured with `config.active_support.hash_digest_class`.
+
+    `config.active_support.use_sha1_digests` is deprecated in favour of `config.active_support.hash_digest_class = ::Digest::SHA1`.
+
+    *Dirkjan Bussink*
+
 *   Fix bug to make memcached write_entry expire correctly with unless_exist
 
     *Jye Lee*

activesupport/lib/active_support/railtie.rb

@@ -87,8 +87,8 @@ module ActiveSupport
         if app.config.active_support.use_sha1_digests
           ActiveSupport::Deprecation.warn(<<-MSG.squish)
             config.active_support.use_sha1_digests is deprecated and will
-            be removed from Rails 6.2. Use config.active_support.hash_digest_class
-            instead.
+            be removed from Rails 6.2. Use
+            config.active_support.hash_digest_class = ::Digest::SHA1 instead.
           MSG
           ActiveSupport::Digest.hash_digest_class = ::Digest::SHA1
         end

guides/source/configuring.md

@@ -1067,7 +1067,7 @@ text/javascript image/svg+xml application/postscript application/x-shockwave-fla
 - `config.active_record.collection_cache_versioning`: `false`
 - `config.active_record.has_many_inversing`: `false`
 - `config.active_support.use_authenticated_message_encryption`: `false`
-- `config.active_support.use_sha1_digests`: `false`
+- `config.active_support.hash_digest_class`: `::Digest::MD5`
 - `ActiveSupport.utc_to_local_returns_utc_offset_times`: `false`
 
 ### Configuring a Database

railties/CHANGELOG.md

@@ -15,12 +15,6 @@
 
     *Nick Wolf*
 
-*   Deprecate `config.active_support.use_sha1_digests`
-
-    `config.active_support.use_sha1_digests` is deprecated. It is replaced with `config.active_support.hash_digest_class` which allows setting the desired Digest instead. The Rails version defaults have been updated to use this new method as well so the behavior there is unchanged.
-
-    *Dirkjan Bussink*
-
 *   Change the default logging level from :debug to :info to avoid inadvertent exposure of personally
     identifiable information (PII) in production environments.