Skip to content

CodeQL cleanup for alerts #18, #19, #20#4153

Merged
khassel merged 3 commits into
MagicMirrorOrg:developfrom
KristjanESPERANTO:codeql
May 12, 2026
Merged

CodeQL cleanup for alerts #18, #19, #20#4153
khassel merged 3 commits into
MagicMirrorOrg:developfrom
KristjanESPERANTO:codeql

Conversation

@KristjanESPERANTO
Copy link
Copy Markdown
Collaborator

@KristjanESPERANTO KristjanESPERANTO commented May 12, 2026

Small cleanup PR to close three CodeQL alerts, without changing app behavior.

  • #18 in js/loader.js
  • #19 in js/socketclient.js
  • #20 in tests/electron/modules/calendar_spec.js

For Loader and MMSocket, make the global export explicit via globalThis (instead of suppressing no-unused-vars).
For calendar tests, remove the unused debug helper logAllText.
Also includes a tiny e2e cleanup: MM_PORT is cleared in afterAll.

Outcome: Three open CodeQL alerts are addressed with small, low-risk changes. The global intent for Loader and MMSocket is explicit, dead test helper code is removed, and e2e test state is cleaned up more reliably between runs.

With this, all current code scanning issues should be resolved in the develop branch 🎈

Remove dead local debug helper in calendar e2e spec to resolve CodeQL alert #20.
Resolve CodeQL unused-local-variable alerts by keeping local const declarations and explicitly exporting both symbols to globalThis.

Refs: #18, #19
@khassel khassel merged commit 13d51cf into MagicMirrorOrg:develop May 12, 2026
12 checks passed
@KristjanESPERANTO KristjanESPERANTO deleted the codeql branch May 12, 2026 22:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants