Bump num-bigint from 0.4.8 to 0.5.1

[dependabot]

Bumps num-bigint from 0.4.8 to 0.5.1.

Changelog

Sourced from num-bigint's changelog.

Release 0.5.1 (2026-07-04)

• Fixed a regression in the B-Z division algorithm.

Contributors: @​cuviper

Release 0.5.0 (2026-07-02)

• Upgrade to rand v0.10 and/or v0.9, and split rand_core.
  • The former rand feature is now split into multiple features, rand_0_9, rand_core_0_9, rand_0_10, and rand_core_0_10, depending on the version and feature set you need.
  • The RandBigInt extension trait is now split into BigRng09 and BigRng010 for each version.
  • The gen_* methods are deprecated in favor of new random_* methods.
  • This is also a value-breaking release, as rand defines it.

Contributors: @​bionicles, @​cuviper, @​divergentdave

Commits

• 33c59ba Merge pull request #348 from cuviper/bz-alg2-step3b
• 38b68f6 Release 0.5.1
• f4a43f5 Fix the missing part of the Burnikel-Ziegler algorithm
• ebfd89a Add failing tests for a bug in B-Z division
• 0ab95df Merge pull request #338 from cuviper/rand-0.10
• 33d6998 Release 0.5.0
• 84d05b7 Clean up manifests of ci crates
• f8daf56 Allow clippy::duplicate_mod where intended
• 022310a Rearrange the rand features to support both 0.9 and 0.10
• 537a036 ci: use the fallback resolver for deps
• Additional commits viewable in compare view

---

Note

Medium Risk
num-bigint underpins bigint parsing and CLVM/compiler paths; 0.5.x is a semver minor with division fixes and rand-related breaking changes, though this repo only enables serde and does not touch source.

Overview
Updates the direct num-bigint dependency in Cargo.toml from 0.4.8 to 0.5.1 (still with the serde feature). Cargo.lock is refreshed so this crate resolves to 0.5.1, while transitive users (e.g. num) keep pinning 0.4.8, so both versions appear in the lockfile.

There are no Rust source changes; existing num_bigint usage (e.g. ToBigInt in CLVM casts, node paths, and compiler tooling) continues against the newer crate release, which includes a Burnikel–Ziegler division fix in 0.5.1 and 0.5.x API/value changes around rand integration compared to 0.4.x.

^{Reviewed by Cursor Bugbot for commit 0ede698. Bugbot is set up for automated code reviews on this repo. Configure here.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	cargo/​num-bigint@​0.5.1

View full report