Florian Best

I have the same issue, I just wanted to set the `Label` via `PUT` but that exists only for the initial creation.

> [@spaceone](https://github.com/spaceone) A small patch can make it, you can make a try: [xzhang1@65c1e83](https://github.com/xzhang1/aptly/commit/65c1e83ec40d24b0e13bf8d72a7a544d6e5f91d5) Thank you for providing the patch. Unfortunately I don't have permissions in our domain to compile...

# Reproducer Caution: This will download 159 MB openldap container! Affected code: https://github.com/Free-IAM/freeiam/blob/80a52e65798ee79e9675d7ecd477ffd63fe21a21/src/freeiam/ldap/connection.py#L716-L731 ```bash git clone https://github.com/Free-IAM/freeiam cd freeiam git checkout 80a52e65798ee79e9675d7ecd477ffd63fe21a21 sed -i 's/equal =\(.*\)/if not\1:/; /if not equal/d;'...

It's acutally `os.path.join()`! The vulnerability here is that ``` user_input = '/tmp/foo' os.path.join('/var/cache/', user_input)``` will result in `user_input`.

fixing it will cause a `mypy` issue: `__version__ = version(cast('str', __package__)) # E: Redundant cast to "str" [redundant-cast]`

This issue is probably the most common one found in my projects.

I guess another example for this issue is: ```sh $ ty check t.py t.py:10:22: error[invalid-type-form] Type arguments for `Literal` must be `None`, a literal value (int, bool, str, or bytes),...

@AlexWaygood ah thank you. Then it's a undetected case of mypy. →https://github.com/python/mypy/issues/20438

same issue for me: ```python def foo(*parts: str | tuple[str, str] | tuple[str, str, int]) -> None: cmp: list[list[tuple[str, str, int]]] = [] for part in parts: if isinstance(part, str):...

hm, if i use the local version the pyproject.toml ignore rules aren't evaluated.