You'll notice
Pasted text now has a wider set of control characters and escape sequences stripped before use.
A new PasteEvent class (event type "paste") strips a wider set of C1 control characters and OSC/DCS-style escape sequences from pasted text before use. It also tracks whether the raw paste was empty or ended with a bracketed-paste focus tail.