diff --git a/internal/audit/audit_test.go b/internal/audit/audit_test.go
index b8854da8..09b493b2 100644
--- a/internal/audit/audit_test.go
+++ b/internal/audit/audit_test.go
@@ -29,18 +29,6 @@ func newTestPool(t *testing.T) *pgxpool.Pool {
 	return pool
 }
 
-func validUUID() pgtype.UUID {
-	var u pgtype.UUID
-	u.Valid = true
-	// Arbitrary fixed bytes; we don't need a real user to exist
-	// because the FK is ON DELETE SET NULL — orphan FKs are fine
-	// for the audit_log column shape.
-	for i := range u.Bytes {
-		u.Bytes[i] = byte(i + 1)
-	}
-	return u
-}
-
 func TestWrite_NoMetadata(t *testing.T) {
 	pool := newTestPool(t)
 	// Use NULL FKs (Valid: false) — the column is nullable.
diff --git a/internal/mailer/mailer.go b/internal/mailer/mailer.go
index 44d3e148..f0ebfb0c 100644
--- a/internal/mailer/mailer.go
+++ b/internal/mailer/mailer.go
@@ -168,7 +168,7 @@ type SentEmail struct {
 	To       string
 	Subject  string
 	TextBody string
-	HtmlBody string
+	HTMLBody string
 }
 
 // FakeSender records calls instead of sending. Safe for concurrent use.
@@ -180,7 +180,7 @@ type FakeSender struct {
 	FailNext error
 }
 
-func (f *FakeSender) Send(ctx context.Context, to, subject, textBody, htmlBody string) error {
+func (f *FakeSender) Send(_ context.Context, to, subject, textBody, htmlBody string) error {
 	f.mu.Lock()
 	defer f.mu.Unlock()
 	if f.FailNext != nil {
@@ -189,7 +189,7 @@ func (f *FakeSender) Send(ctx context.Context, to, subject, textBody, htmlBody s
 		return err
 	}
 	f.Sent = append(f.Sent, SentEmail{
-		To: to, Subject: subject, TextBody: textBody, HtmlBody: htmlBody,
+		To: to, Subject: subject, TextBody: textBody, HTMLBody: htmlBody,
 	})
 	return nil
 }
diff --git a/web/src/routes/settings/settings.test.ts b/web/src/routes/settings/settings.test.ts
index e89228a6..ff673892 100644
--- a/web/src/routes/settings/settings.test.ts
+++ b/web/src/routes/settings/settings.test.ts
@@ -64,7 +64,7 @@ describe('Settings page — ListenBrainz', () => {
     await waitFor(() =>
       expect(screen.getByPlaceholderText(/paste your lb token/i)).toBeInTheDocument()
     );
-    expect(screen.getByRole('button', { name: /save/i })).toBeInTheDocument();
+    expect(screen.getByRole('button', { name: /^save$/i })).toBeInTheDocument();
   });
 
   test('token-set state renders masked + Clear button', async () => {
@@ -88,7 +88,7 @@ describe('Settings page — ListenBrainz', () => {
     render(SettingsPage);
     const input = await screen.findByPlaceholderText(/paste your lb token/i);
     await fireEvent.input(input, { target: { value: 'mytoken' } });
-    await fireEvent.click(screen.getByRole('button', { name: /save/i }));
+    await fireEvent.click(screen.getByRole('button', { name: /^save$/i }));
     await waitFor(() => expect(mutateFn).toHaveBeenCalledWith('mytoken', expect.anything()));
   });