Use SHA-256 instead of MD5 to generate cache keys for static analysis cache (as SHA-256 is significantly faster than MD5 with PHP >= 8.4 on modern CPUs)

Author: sebastianbergmann

ChangeLog-12.1.md

@@ -2,6 +2,12 @@
 
 All notable changes are documented in this file using the [Keep a CHANGELOG](http://keepachangelog.com/) principles.
 
+## [12.1.3] - 2025-MM-DD
+
+### Changed
+
+* Use SHA-256 instead of MD5 to generate cache keys for static analysis cache (as SHA-256 is significantly faster than MD5 with PHP >= 8.4 on modern CPUs)
+
 ## [12.1.2] - 2025-04-03
 
 ### Fixed

src/StaticAnalysis/CachingFileAnalyser.php

@@ -12,9 +12,9 @@
 use const DIRECTORY_SEPARATOR;
 use function file_get_contents;
 use function file_put_contents;
+use function hash;
 use function implode;
 use function is_file;
-use function md5;
 use function serialize;
 use function unserialize;
 use SebastianBergmann\CodeCoverage\Util\Filesystem;
@@ -211,7 +211,8 @@ private function write(string $filename, array $data): void
 
     private function cacheFile(string $filename): string
     {
-        $cacheKey = md5(
+        $cacheKey = hash(
+            'sha256',
             implode(
                 "\0",
                 [