With dune 2.0 integration ocaml-sha blocks dune upgrade by depending on jbuilder.transition. There is already pull request implementing this: https://github.com/djs55/ocaml-sha/pull/42