From 68fa8ebd55813f2a97e5c6e0094ed6a42797c32e Mon Sep 17 00:00:00 2001
From: Paul Hebble <pjhebble@gmail.com>
Date: Tue, 30 Jul 2024 15:49:06 -0500
Subject: [PATCH] Mark download_hash.sha1 optional in spec

---
 Spec.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/Spec.md b/Spec.md
index 4024e0d06..887d6a209 100644
--- a/Spec.md
+++ b/Spec.md
@@ -451,14 +451,14 @@ and not filled in by hand.
 
 ##### download_hash
 
-If supplied, `download_hash` is an object of hash digests. Currently
-SHA1 and SHA256 calculated hashes of the resulting file downloaded.
+If supplied, `download_hash` is an object of hash digests of the downloaded file.
+Clients up to **v1.34** require both `sha1` and `sha256` to be populated, but
+later clients allow either or both to be omitted.
 It is recommended that this field is only generated by automated
 tools (where it is encouraged), and not filled in by hand.
 
 ```json
     "download_hash": {
-        "sha1": "1F4B3F21A77D4A302E3417A7C7A24A0B63740FC5",
         "sha256": "E3B0C44298FC1C149AFBF4C8996FB92427AE41E4649B934CA495991B7852B855"
     }
 ```