# v6.1.2 — CodeQL Cleanup (Follow-up)

Resolves 4 remaining CodeQL alerts from v6.1.1: 3 Docker workflow untrusted-checkout and 1 unused import.

## Security

- Remove `ref: ${{ github.event.workflow_run.head_sha }}` from `docker-publish.yml` checkout steps — CodeQL does not accept `persist-credentials: false` as mitigation (#145, #146, #161)

## Fixed

- Remove orphaned `jose` import from `entries-auth-branches.test.ts` (#162), cascading from v6.1.1 `err` variable removal

---

**Compare**: [`v6.1.1...v6.1.2`](https://github.com/neverinfamous/memory-journal-mcp/compare/v6.1.1...v6.1.2)

```bash
npm install -g memory-journal-mcp@6.1.2
```

```bash
docker pull writenotenow/memory-journal-mcp:v6.1.2
```
