Make the existing PBKDF2 SHA-1 default explicit for generated salts

Proprietary

Add HashAlgorithmName.SHA1 to attributed Rfc2898DeriveBytes(string, int saltSize, int iterations) construction. The modern legacy overload delegates to exactly this constructor. Preserve generated salt, supplied iterations, stateful reads, evaluation and initialization. Require a string-typed password; named args, other overloads, unresolved calls and conditional snapshots remain unchanged. Opt-in compatibility port; no strength or format policy change. Lambda/query contexts remain unchanged.

OpenRewrite.Recipes.CSharp.Migration.Dotnet.Net7.UseExplicitPbkdf2HashForGeneratedSalt

mod run . --recipe=OpenRewrite.Recipes.CSharp.Migration.Dotnet.Net7.UseExplicitPbkdf2HashForGeneratedSalt

Install it once, then run it on every repository under the current directory. New to the Moderne CLI? Set it up.