Yes, that's what I was looking at - what happens to an existing install if this value is changed?

I don't know what version of puppet this is targeted for - obviously in a stable erelease series a conservative default might make sense, but I'd how to see it using sha256 by default in the next major release at least.