From cd77f57eb6ece0e8b0a7ae40e97e54decbd655fa Mon Sep 17 00:00:00 2001
From: Ivan Ivanov <ivan.ivanov@suricactus.com>
Date: Wed, 29 Apr 2026 18:24:27 +0300
Subject: [PATCH] Explicitly say that md5 hex is not usedforsecurity

We can finally do this, since we bumped the minimal python version to 3.9
---
 libqfieldsync/utils/file_utils.py | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/libqfieldsync/utils/file_utils.py b/libqfieldsync/utils/file_utils.py
index 7606f54..5d6a168 100644
--- a/libqfieldsync/utils/file_utils.py
+++ b/libqfieldsync/utils/file_utils.py
@@ -131,9 +131,7 @@ def import_file_checksum(path: str) -> Optional[str]:
     if os.path.exists(file_path):
         with open(file_path, "rb") as f:
             file_data = f.read()
-            # TODO @suricactus: Python 3.9, pass `usedforsecurity=False`
-            # https://app.clickup.com/t/2192114/QF-6481
-            md5sum = hashlib.md5(file_data).hexdigest()  # noqa: S324
+            md5sum = hashlib.md5(file_data, usedforsecurity=False).hexdigest()
 
     return md5sum