dependabot-nuget 0.137.0 → 0.138.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 820719dfd4da2c46dea908b707da21b6c7beb5820fa2ba1789a6ea91f4830915
-  data.tar.gz: fe04ae4fde2983c74e8a14dbe4e675d48363269a6f4368adede45a1e61afee3f
+  metadata.gz: a0b5e9141da75af79a69d121ba4ccd178e8feeeda4f756d30b80af0ead0ccd93
+  data.tar.gz: d249603036d41f14dc0e85a175aaa8af72a23340ce8526faf3e664881112c534
 SHA512:
-  metadata.gz: d661740ec0d73a0a7f551161f63582db317e137eb5238e93125eb652a2dc1114bfcf8ab45dfd6bb6b0b62885524bdbfa4451ae5a3a64841efad909b8f83c4772
-  data.tar.gz: 27fc3e8aec36327a9b32ef1a50304bb6efd4840a00c487a3b5afbb8e0256a397285b1fe6142500e63999bdce71b2a39b7fe78afe6f21484c70cbc58b27c407e3
+  metadata.gz: 315dbb47fb6f0a28b71ffd769ef0350e888e8d22d28f396da81cf8393128540442499161d83a68b6d3f2bd6787a1919fd7ca4b582901e65764551f27ea1baf42
+  data.tar.gz: c85c335ae17409ea718165d02d94e3dcca781de82487118fa29ab2b36ac49b9f3f6c85fdef4d85bb74875c11ef046eeffb9ebfd8e4aa060fca312467ea579604

data/lib/dependabot/nuget/update_checker/repository_finder.rb

@@ -166,6 +166,11 @@ module Dependabot
               }
             end
 
+          disabled_sources = disabled_sources(doc)
+          sources.reject! do |s|
+            disabled_sources.include?(s[:key])
+          end
+
           unless doc.css("configuration > packageSources > clear").any?
             sources << { url: DEFAULT_REPOSITORY_URL, key: nil }
           end
@@ -198,6 +203,20 @@ module Dependabot
           }
         end
 
+        # rubocop:disable Metrics/PerceivedComplexity
+        def disabled_sources(doc)
+          doc.css("configuration > disabledPackageSources > add").map do |node|
+            value = node.attribute("value")&.value ||
+                    node.at_xpath("./value")&.content
+
+            if value&.strip&.downcase == "true"
+              node.attribute("key")&.value&.strip ||
+                node.at_xpath("./key")&.content&.strip
+            end
+          end
+        end
+        # rubocop:enable Metrics/PerceivedComplexity
+
         # rubocop:disable Metrics/PerceivedComplexity
         def add_config_file_credentials(sources:, doc:)
           sources.each do |source_details|

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-nuget
 version: !ruby/object:Gem::Version
-  version: 0.137.0
+  version: 0.138.2
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-03-15 00:00:00.000000000 Z
+date: 2021-03-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.137.0
+        version: 0.138.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.137.0
+        version: 0.138.2
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement