Well, Fossil has already moved from SHA1 to SHA3-256 and I haven't encountered any issues.

https://fossil-scm.org/home/doc/tip/www/hashpolicy.wiki