fix: security update -> use sha256 instead of md5 for file hashing

fix: security update -> use sha256 instead of md5 for file hashing #1996