Update CHANGELOG
builder/common: support sha1/sha256 hashes