[CHIA-3931] Malachite2wjb

[wjblanke]

https://www.malachite.rs/performance/

---

Note

High Risk
Switches core arithmetic paths (div, divmod, mod, modpow) to a new bigint implementation, which is potentially consensus-critical and could change edge-case behavior or performance characteristics. Adds several new transitive dependencies via malachite-bigint, increasing supply-chain and build-risk.

Overview
Introduces malachite-bigint as an additional bigint backend and wires it into the allocator and integer parsing utilities.

Updates the allocator with new_malachite_number() / malachite_number() plus shared helpers to canonicalize bigint-to-atom encoding, and switches div, divmod, mod, and modpow in more_ops.rs to operate on Malachite integers (including updated zero/negative checks).

Refreshes Cargo.lock with the new Malachite dependency graph and makes minor test expectation tweaks for empty buffers.

^{Written by Cursor Bugbot for commit 2c6f31b. This will update automatically on new commits. Configure here.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	cargo/​malachite-bigint@​0.9.1

View full report

[socket-security]

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

Ignoring alerts on:

• cargo/bytemuck@1.25.0
• cargo/foldhash@0.2.0
• cargo/libm@0.2.16
• cargo/malachite-base@0.9.1
• cargo/malachite-bigint@0.9.1
• cargo/malachite-nz@0.9.1
• cargo/paste@1.0.15
• cargo/safe_arch@1.0.0
• cargo/wide@1.1.1
• cargo/hashbrown@0.16.1
• cargo/itertools@0.14.0
• cargo/ryu@1.0.23

View full report

[cursor]

Cursor Bugbot has reviewed your changes and found 2 potential issues.

^{Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

[wjblanke]

@SocketSecurity ignore-all