chore(deps): consolidate dependency updates

.github/dependabot.yml

@@ -15,6 +15,13 @@ updates:
         update-types:
           - minor
           - patch
+    ignore:
+      - dependency-name: '@types/node'
+        update-types:
+          - version-update:semver-major
+      - dependency-name: typescript
+        update-types:
+          - version-update:semver-major
 
   - package-ecosystem: npm
     directory: /cli
@@ -30,6 +37,13 @@ updates:
         update-types:
           - minor
           - patch
+    ignore:
+      - dependency-name: '@types/node'
+        update-types:
+          - version-update:semver-major
+      - dependency-name: typescript
+        update-types:
+          - version-update:semver-major
 
   - package-ecosystem: github-actions
     directory: /

app/api/chat/route.ts

@@ -181,12 +181,7 @@ async function readChatRequestBody(
 }
 
 type FallbackKind =
-  | 'none'
-  | 'forced_photo'
-  | 'parse_fallback'
-  | 'render_fallback'
-  | 'recovered_text'
-  | 'error';
+  'none' | 'forced_photo' | 'parse_fallback' | 'render_fallback' | 'recovered_text' | 'error';
 
 interface ChatAutoresearchDiagnostics {
   raw_model_output_present: boolean;

app/api/chat/security.ts

@@ -33,12 +33,15 @@ export function buildUntrustedConversationRequest(messages: ChatMessage[]): stri
 }
 
 export function sanitizeInput(text: string): string {
-  return text
-    .replace(/\0/g, '')
-    .replace(/[\x01-\x08\x0B\x0C\x0E-\x1F\x7F]/g, '')
-    .replace(/\n{4,}/g, '\n\n\n')
-    .replace(/ {4,}/g, '   ')
-    .trim();
+  return (
+    text
+      .replace(/\0/g, '')
+      // eslint-disable-next-line no-control-regex -- Strip unsafe C0 control bytes while preserving newlines and tabs.
+      .replace(/[\x01-\x08\x0B\x0C\x0E-\x1F\x7F]/g, '')
+      .replace(/\n{4,}/g, '\n\n\n')
+      .replace(/ {4,}/g, '   ')
+      .trim()
+  );
 }
 
 export function detectInjection(text: string): boolean {

autoresearch/score_quality.ts

@@ -66,12 +66,7 @@ type ChatDiagnostics = {
     code?: string;
   }>;
   fallback_kind?:
-    | 'none'
-    | 'forced_photo'
-    | 'parse_fallback'
-    | 'render_fallback'
-    | 'recovered_text'
-    | 'error';
+    'none' | 'forced_photo' | 'parse_fallback' | 'render_fallback' | 'recovered_text' | 'error';
   final_component?: string | null;
   final_mode?: string | null;
 };