Simple answer: github was doing most of this work as SHA1 is a non-allowed hash type for FIPS compliance, which mattered since Microsoft had landed the US DoD JEDI contract.
The JEDI contract was cancelled a in 2021 so the work never continued on that workstream.
The JEDI contract was cancelled a in 2021 so the work never continued on that workstream.
source: former github developer