*20* years ago SHA-1 was broken: researchers found a weakness that reduced its collision resistance from 2^80 to 2^69 hash operations. That's a long time ago.
NIST deprecated SHA-1 in 2011 and disallowed its use in signatures in 2013. That's a long time ago.
In 2020, the SHAmble authors showed that chosen prefix attacks against SHA-1 were feasible for 11 kUSD.
You can check your OpenPGP certificate using:
sq cert lint --cert FINGERPRINT
Add --fix to fix any issues.