Phar: Default signature algorithm changed from SHA1 to SHA256