dependabot-nuget 0.137.2 → 0.138.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6f354b8a7ffa02858d1e2de6c8b2bede478ab528bac89aacb2ca4155d6e79cda
-  data.tar.gz: dcb4d5c707ff4e2a442717986de598a303c687358fe9aa608e3ad158c5f16022
+  metadata.gz: 0f46c6877301a66e1db12f9e567d7217586a161f7b34af52d235d18fbf0667c7
+  data.tar.gz: 71f1f09b44606f1dd0fdabcee5d766eda99bfd2a9c0506557347bffad7724f19
 SHA512:
-  metadata.gz: 12d45e77957737138cf5ac86546c2154073197128cfebfe1af81d36c8de3f80d7740478c2190196a11a279b6f0e1c64b6222ca543c372198f575fb70078e0df0
-  data.tar.gz: e7b67b4f27dc48a15110aa46a23fdba49c0d86bb7a224467b5e7dfe1096985f113f55555710b2e084bf4e2a411b81a4db0c90f44e934d78380889720abcfada3
+  metadata.gz: 799215e2f7afe44882c8799b1b34ff677636bf80e447cbd38b6e9a143a49c9b5ced0b2fa5a8d0f3d01228df4499274c53726acacebbc9124fed9825d4470bc07
+  data.tar.gz: 1ac79a58ba4d2d9aeb5730ea17b60c6f46eeb3644f245a486a18fac5992300cd3918f2f16250cd7820799171787b491b42ed826061d8a186d66e95bc70a635eb

data/lib/dependabot/nuget/update_checker/repository_finder.rb

@@ -166,6 +166,11 @@ module Dependabot
               }
             end
 
+          disabled_sources = disabled_sources(doc)
+          sources.reject! do |s|
+            disabled_sources.include?(s[:key])
+          end
+
           unless doc.css("configuration > packageSources > clear").any?
             sources << { url: DEFAULT_REPOSITORY_URL, key: nil }
           end
@@ -198,6 +203,20 @@ module Dependabot
           }
         end
 
+        # rubocop:disable Metrics/PerceivedComplexity
+        def disabled_sources(doc)
+          doc.css("configuration > disabledPackageSources > add").map do |node|
+            value = node.attribute("value")&.value ||
+                    node.at_xpath("./value")&.content
+
+            if value&.strip&.downcase == "true"
+              node.attribute("key")&.value&.strip ||
+                node.at_xpath("./key")&.content&.strip
+            end
+          end
+        end
+        # rubocop:enable Metrics/PerceivedComplexity
+
         # rubocop:disable Metrics/PerceivedComplexity
         def add_config_file_credentials(sources:, doc:)
           sources.each do |source_details|

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-nuget
 version: !ruby/object:Gem::Version
-  version: 0.137.2
+  version: 0.138.4
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-03-16 00:00:00.000000000 Z
+date: 2021-03-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.137.2
+        version: 0.138.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.137.2
+        version: 0.138.4
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement