From 05d3e3801d2aae72aa466b30b9e6d7af90170f69 Mon Sep 17 00:00:00 2001
From: Tristen Pierson <98970594+tbitcs@users.noreply.github.com>
Date: Mon, 13 Jul 2026 15:33:52 -0400
Subject: [PATCH] fix: clear remaining post-merge CodeQL findings

---
 docs/LEDGER.md                | 14 ++++++++++++++
 src/specsmith/updater.py      |  2 --
 src/specsmith/vcs_commands.py |  1 -
 3 files changed, 14 insertions(+), 3 deletions(-)

diff --git a/docs/LEDGER.md b/docs/LEDGER.md
index 74ad105..3608aca 100644
--- a/docs/LEDGER.md
+++ b/docs/LEDGER.md
@@ -417,3 +417,17 @@
 - **REQs affected**: TEST-470
 - **Status**: complete
 - **Chain hash**: `3b3775a522076719...`
+
+## 2026-07-13T15:30 — test-ran TEST-371: passed (status: pending → implemented)
+- **Author**: specsmith
+- **Type**: test-ran
+- **REQs affected**: TEST-371
+- **Status**: complete
+- **Chain hash**: `92ad46273e1a25c0...`
+
+## 2026-07-13T15:30 — test-ran TEST-470: passed (status: pending → implemented)
+- **Author**: specsmith
+- **Type**: test-ran
+- **REQs affected**: TEST-470
+- **Status**: complete
+- **Chain hash**: `77af924fed83a344...`
diff --git a/src/specsmith/updater.py b/src/specsmith/updater.py
index f5671ff..a189b0f 100644
--- a/src/specsmith/updater.py
+++ b/src/specsmith/updater.py
@@ -216,8 +216,6 @@ def run_migration(root: Path, *, dry_run: bool = False) -> list[str]:
 
     # Reject backward migration (downgrade) unconditionally — REQ-370 / I16.
     def _ver(v: str) -> tuple[int, ...]:
-        import re
-
         m = re.match(r"(\d+)[.](\d+)(?:[.](\d+))?", v or "")
         if not m:
             return (0,)
diff --git a/src/specsmith/vcs_commands.py b/src/specsmith/vcs_commands.py
index e6d1cab..3befa2c 100644
--- a/src/specsmith/vcs_commands.py
+++ b/src/specsmith/vcs_commands.py
@@ -353,7 +353,6 @@ def create_pr(
     from specsmith.paths import find_scaffold
 
     scaffold_path = find_scaffold(root)
-    platform = "github"
     raw: dict[str, object] = {}
 
     if scaffold_path and scaffold_path.exists():