why to deprecate SHA1 in Java SDK?

anyone know why to deprecate SHA1 in Java SDK

sha1算法的碰撞被破解了，用sha1做验证不安全了，所以建议放弃sha1用sha256或者别的。