dependabot-nuget 0.138.0 → 0.138.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 25c07b7ff0b2dcd7e8f76182b95b2e999a5161f3aef6fb67c452072076ab78a4
-  data.tar.gz: c74f39409c1af2b042121f4e78fe04172f86f7c84125e09357e0dfa95524db23
+  metadata.gz: 7b3e34040efb98c56463b29144f6230c320bf6b610353d5162925ef2f2e39937
+  data.tar.gz: e9091ad80414ce8e91d0db775f66d174f22f04b228acd402360bf1ffccde1d30
 SHA512:
-  metadata.gz: 93e26147419c03f687fb20bbee291eb1baeff3f2226a8a76c3291745e7c82647ab6e52769d0b043f6fdf1ce1ab4804b4fb0b85b375e7660602eb6886e155f3c1
-  data.tar.gz: 3f99c1251ecced56958be5e5669063e48cba28100c9d168c9e4c322700e0944dbd19de112bd53acf6ad5ba5790eaa129bc25f10464d5753a1daf966586fd0794
+  metadata.gz: 3e627c6f6832f261419fec86209d50c2650c607c0d2ee4297cff61a8e628ed8e01f1daef118dc69f5dfc2613c4926d7077795d4fd72495738e197edbd93506f3
+  data.tar.gz: 1e0a02dfd06e851f940cae7e86de9ce38057b0f38e1efb2809344e3b84e75785c194c25f03c54d4201942a3867f784c4f3a12cb056d18f8f38dbd35ed19d44e5

data/lib/dependabot/nuget/update_checker/repository_finder.rb

@@ -166,6 +166,11 @@ module Dependabot
               }
             end
 
+          disabled_sources = disabled_sources(doc)
+          sources.reject! do |s|
+            disabled_sources.include?(s[:key])
+          end
+
           unless doc.css("configuration > packageSources > clear").any?
             sources << { url: DEFAULT_REPOSITORY_URL, key: nil }
           end
@@ -198,6 +203,20 @@ module Dependabot
           }
         end
 
+        # rubocop:disable Metrics/PerceivedComplexity
+        def disabled_sources(doc)
+          doc.css("configuration > disabledPackageSources > add").map do |node|
+            value = node.attribute("value")&.value ||
+                    node.at_xpath("./value")&.content
+
+            if value&.strip&.downcase == "true"
+              node.attribute("key")&.value&.strip ||
+                node.at_xpath("./key")&.content&.strip
+            end
+          end
+        end
+        # rubocop:enable Metrics/PerceivedComplexity
+
         # rubocop:disable Metrics/PerceivedComplexity
         def add_config_file_credentials(sources:, doc:)
           sources.each do |source_details|

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-nuget
 version: !ruby/object:Gem::Version
-  version: 0.138.0
+  version: 0.138.5
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-03-17 00:00:00.000000000 Z
+date: 2021-03-26 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.138.0
+        version: 0.138.5
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.138.0
+        version: 0.138.5
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement