Make the existing PBKDF2 SHA-1 default explicit

Proprietary

Add HashAlgorithmName.SHA1 to attributed three-argument Rfc2898DeriveBytes constructors with a string/byte-array password, byte-array salt and explicit iteration count. Preserve the existing derived bytes, iteration count, stateful GetBytes/Reset behavior and object initialization. This opt-in compatibility migration does not strengthen passwords or select new hash/iteration policies. Named arguments, generated salts, other overloads, unresolved calls and conditional snapshots remain unchanged. Lambda/query contexts remain unchanged.

OpenRewrite.Recipes.CSharp.Migration.Dotnet.Net7.UseExplicitPbkdf2HashAlgorithm
mod run . --recipe=OpenRewrite.Recipes.CSharp.Migration.Dotnet.Net7.UseExplicitPbkdf2HashAlgorithm

Install it once, then run it on every repository under the current directory. New to the Moderne CLI? Set it up.