build(deps): bump termlens from 0.6.1 to 0.7.0

[dependabot]

Bumps termlens from 0.6.1 to 0.7.0.

Release notes

Sourced from termlens's releases.

v0.7.0

Added

• TerminalBuilder::envs sets several child environment variables from an iterator of key-value pairs. Values keep their iteration and builder-call order, and remain explicit when env_clear disables inherited variables.

• Screen::links reports the OSC 8 hyperlinks an application emitted. A hyperlink changes no cell — its label renders exactly as unlinked text would — so the URL existed nowhere a test could reach, and an assertion that a TUI linked an issue, a file or a doc page passed identically against an application that emitted no link at all, or linked the wrong target. Captured rather than answered, on the same grounds as the OSC 52 clipboard: the only evidence otherwise available is the application's own visible output, which proves the code path ran and nothing about where it points.

  Each span reports its uri, its id (spans sharing one are one logical link), the label it wrapped, and whether the application ever closed it — an unterminated link is a real defect, because in a real terminal every character written afterwards joins it. Two bounds keep the capture honest: the log holds the most recent 64 spans and evicts oldest-first, so a TUI that redraws its links every frame still reports the current frame's; and a label past the capture bound is reported as unknown rather than as a prefix, since a prefix of the wrong length is a wrong answer.

• Screen::cursor_shape and Screen::cursor_blink report DECSCUSR. A screen where the application asked for a bar and one where it never asked used to be the same Screen. The shape is load-bearing behaviour rather than decoration — a modal editor switches to a bar for insert and back to a block for normal, and "the mode indicator says INSERT" and "the terminal was actually put into insert" are different claims. It also makes the restore assertable, which is the half that ships broken: a program that changes the cursor and never changes it back leaves the user's terminal wrong after exit, the same class of defect alternate_screen() already catches.

  Shape and blink are one DECSCUSR parameter but two facts, so they are reported apart. CursorShape::Default — the application never sent the escape — is a third state and is reported as itself rather than folded into Block.

• Key::Insert, encoding ESC [ 2 ~, and chording like its neighbours (Key::Insert.shift() → ESC [ 2 ; 2 ~). It was the 2 missing from a navigation run that already had 3, 5 and 6, so an application binding Insert could not be tested without hand-writing the escape.

Changed

... (truncated)

Changelog

Sourced from termlens's changelog.

[0.7.0] - 2026-08-27

Added

• TerminalBuilder::envs sets several child environment variables from an iterator of key-value pairs. Values keep their iteration and builder-call order, and remain explicit when env_clear disables inherited variables.

• Screen::links reports the OSC 8 hyperlinks an application emitted. A hyperlink changes no cell — its label renders exactly as unlinked text would — so the URL existed nowhere a test could reach, and an assertion that a TUI linked an issue, a file or a doc page passed identically against an application that emitted no link at all, or linked the wrong target. Captured rather than answered, on the same grounds as the OSC 52 clipboard: the only evidence otherwise available is the application's own visible output, which proves the code path ran and nothing about where it points.

  Each span reports its uri, its id (spans sharing one are one logical link), the label it wrapped, and whether the application ever closed it — an unterminated link is a real defect, because in a real terminal every character written afterwards joins it. Two bounds keep the capture honest: the log holds the most recent 64 spans and evicts oldest-first, so a TUI that redraws its links every frame still reports the current frame's; and a label past the capture bound is reported as unknown rather than as a prefix, since a prefix of the wrong length is a wrong answer.

• Screen::cursor_shape and Screen::cursor_blink report DECSCUSR. A screen where the application asked for a bar and one where it never asked used to be the same Screen. The shape is load-bearing behaviour rather than decoration — a modal editor switches to a bar for insert and back to a block for normal, and "the mode indicator says INSERT" and "the terminal was actually put into insert" are different claims. It also makes the restore assertable, which is the half that ships broken: a program that changes the cursor and never changes it back leaves the user's terminal wrong after exit, the same class of defect alternate_screen() already catches.

  Shape and blink are one DECSCUSR parameter but two facts, so they are reported apart. CursorShape::Default — the application never sent the escape — is a third state and is reported as itself rather than folded into Block.

• Key::Insert, encoding ESC [ 2 ~, and chording like its neighbours (Key::Insert.shift() → ESC [ 2 ; 2 ~). It was the 2 missing from a navigation run that already had 3, 5 and 6, so an application binding Insert could not be tested without hand-writing the escape.

... (truncated)

Commits

• 5bbb220 release: v0.7.0 — links, cursor shape, and a bounded decoder (#173)
• e1be7d9 fix: stop a payload choosing how much memory a decode allocates (#172)
• e47ec9a fix: RIS returns the cursor shape to the terminal's default (#171)
• b4b59c7 feat!: OSC 8 links, cursor shape, Key::Insert, and non_exhaustive (#170)
• 2108677 fix: Remove unused workspace termlens dependency pin (#169)
• a8d8c6d test(styles): cover dim and italic attributes (#168)
• 11a5c78 feat: add TerminalBuilder::envs (#167)
• 7eec626 fix(ci): don't fail main on a squash message GitHub wrote (#160)
• 471df02 fix: support no-default-features builds (#158)
• 7b2322f fix(docs): check default feature documentation (#157)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Commit policy check failed. AI assistance is welcome; AI attribution is not. Remove the trailer and recommit — you are the author of record.

Fix a branch with git rebase -i (or git commit --amend) to drop the trailer, then force-push. The offending commits are listed in the job log.