Ugh, I didn't know that SHA-1 submodules wouldn't be supported in SHA-256 repos. That changes the transition from painless to a major dumpster fire. Having to maintain converted forks, and use different hashes from upstream is going to be a mess.

git submodules has always been a major dumpster fire. You’re honestly better avoiding regardless of SHA-256 incompatibilities