diff --git a/scripts/dev-service.mjs b/scripts/dev-service.mjs
index 3c741c963..a44d2d61b 100644
--- a/scripts/dev-service.mjs
+++ b/scripts/dev-service.mjs
@@ -80,7 +80,7 @@ async function writeInstalledFingerprint(fingerprint) {
   )
 }
 
-export function windowsElevationInvocation(
+function windowsElevationInvocation(
   installer,
   environment = process.env,
 ) {
diff --git a/src-tauri/src/core/sysopt.rs b/src-tauri/src/core/sysopt.rs
index 13dfe0012..391274cc7 100644
--- a/src-tauri/src/core/sysopt.rs
+++ b/src-tauri/src/core/sysopt.rs
@@ -172,10 +172,10 @@ where
 
 /// Treats a missing network service as a completed disable: with nothing to write to, the
 /// requested "no proxy" state already holds. Turning a proxy on must still fail.
-fn tolerate_missing_network_service(enabling: bool, outcome: sysproxy::Result<()>) -> Result<()> {
+fn tolerate_missing_network_service(_enabling: bool, outcome: sysproxy::Result<()>) -> Result<()> {
     match outcome {
         #[cfg(target_os = "macos")]
-        Err(sysproxy::Error::NoActiveNetworkService) if !enabling => {
+        Err(sysproxy::Error::NoActiveNetworkService) if !_enabling => {
             logging!(warn, Type::Core, "no active network service, nothing to turn off");
             Ok(())
         }