dependabot-nuget 0.137.1 → 0.138.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a769aec76131fe4ebde904fa1df37331f862d7a51630a080e574eff5dee6e783
-  data.tar.gz: 7b974cc9fa11f8d1b9ab00045bcb9b171735de9a19a5b6aeeb285e083b526ad6
+  metadata.gz: 5401ce892d4b4795b7d1fc3561f3b6b42f158444bdc234d7a324292138f850fc
+  data.tar.gz: d3f9d44fb264f1377e789227f3de954de722c7efd84f3fd0d57ed9405a0963ca
 SHA512:
-  metadata.gz: 73360d7d7f63643ff96b9a06962b0296783f416218717ab5470fad5d97cb7b78d7416ae132852f77c9f6baab6f56d3cc70bb882bad4bd5180e9bb56e18a68473
-  data.tar.gz: 0cb255baa48524edcbb09a0b1b338001e56563d37abe7872eb08360740a04790ef3e4d2a7ddc46d4b8e02b0c123b1a5a797055c90770bbbe8ee558803fec5898
+  metadata.gz: f0a0d85054ee204143f9e291f11ed2754de2a9ea8e1eedee3e60bc48fcf73ef0f39931971dd478dabf1c60246eba58cdf11ff869963bb0a484fc83d7d2011292
+  data.tar.gz: c815a211794fc587e38e6095555ea5b9a33cf0421a3b1f933b78ac02371c204dd10275d55013e013e6bb70e8c7bf8edcdfe807c19573fe3d8e1c741288f9f732

data/lib/dependabot/nuget/update_checker/repository_finder.rb

@@ -166,6 +166,11 @@ module Dependabot
               }
             end
 
+          disabled_sources = disabled_sources(doc)
+          sources.reject! do |s|
+            disabled_sources.include?(s[:key])
+          end
+
           unless doc.css("configuration > packageSources > clear").any?
             sources << { url: DEFAULT_REPOSITORY_URL, key: nil }
           end
@@ -198,6 +203,20 @@ module Dependabot
           }
         end
 
+        # rubocop:disable Metrics/PerceivedComplexity
+        def disabled_sources(doc)
+          doc.css("configuration > disabledPackageSources > add").map do |node|
+            value = node.attribute("value")&.value ||
+                    node.at_xpath("./value")&.content
+
+            if value&.strip&.downcase == "true"
+              node.attribute("key")&.value&.strip ||
+                node.at_xpath("./key")&.content&.strip
+            end
+          end
+        end
+        # rubocop:enable Metrics/PerceivedComplexity
+
         # rubocop:disable Metrics/PerceivedComplexity
         def add_config_file_credentials(sources:, doc:)
           sources.each do |source_details|

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-nuget
 version: !ruby/object:Gem::Version
-  version: 0.137.1
+  version: 0.138.3
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-03-15 00:00:00.000000000 Z
+date: 2021-03-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.137.1
+        version: 0.138.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.137.1
+        version: 0.138.3
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement