# What changed in js-sha256

> 10 changes in js-sha256 0.12 to 1 from its official release notes, upgrade guides and advisories: 5 breaking, 2 new APIs and options. Each one cited. Sources checked 2026-10-23. HTML: https://unstale.sh/npm/js-sha256/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## js-sha256 1

### Breaking changes

- Updating after finalization now throws an error. (1.0.0) — [release notes](https://github.com/emn178/js-sha256/releases/tag/v1.0.0)
- Legacy environment flags and obsolete compatibility polyfills are removed. (1.0.0) — [release notes](https://github.com/emn178/js-sha256/releases/tag/v1.0.0)
- Runtime CommonJS, AMD, Node.js, Web Worker, and ArrayBuffer environment switches are removed from the core implementation. (1.0.0) — [release notes](https://github.com/emn178/js-sha256/releases/tag/v1.0.0)
- The old generated sha256.mjs entry point is removed. (1.0.0) — [release notes](https://github.com/emn178/js-sha256/releases/tag/v1.0.0)
- The old generated sha256.node.mjs entry point is removed. (1.0.0) — [release notes](https://github.com/emn178/js-sha256/releases/tag/v1.0.0)

### New APIs and options

- Dedicated ESM, CommonJS, Node.js, and browser distribution entry points are available. (1.0.0) — [release notes](https://github.com/emn178/js-sha256/releases/tag/v1.0.0)
- Native Node.js SHA-256, SHA-224, and HMAC implementations support streaming. (1.0.0) — [release notes](https://github.com/emn178/js-sha256/releases/tag/v1.0.0)

### Tooling

- The package builds automatically before npm pack. (1.0.0) — [release notes](https://github.com/emn178/js-sha256/releases/tag/v1.0.0)
- The package builds automatically before npm publish. (1.0.0) — [release notes](https://github.com/emn178/js-sha256/releases/tag/v1.0.0)

## js-sha256 0.12

### Fixes and other changes

- Fixes recognizing the environment as Node.js when using browserfs. (0.12.0) — [release notes](https://github.com/emn178/js-sha256/releases/tag/v0.12.0)