dependabot-nuget 0.138.1 → 0.138.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9ce740544a72ef02b4b96263b14737ee5f024ce230aa8f836d507ec0613c8302
-  data.tar.gz: 8b576f8b573980b83fed8389778dfb91b29c3788063d80db9fa3d25f88c7d04b
+  metadata.gz: 79c86944d3b0d4135ad43ccd80133125672bdf816558e275d28500a6dd791d0c
+  data.tar.gz: 9724e62ffbc694e197526aa7bec50f94e221d3c0f9f5f058b25d292f6a96959c
 SHA512:
-  metadata.gz: d38fbd9b9df0753e9d26f108b549ad2aca7122ac31956450bb14c1bbc72fa506b14f0837415c8fcdbe3c23ef4ecb9f4e688f73ce8ebbb9e0084ffedc13ea04c6
-  data.tar.gz: 5752af1cecf49562baa03613b8a824c3d9d231fe9a95445a69ac5b1027e18100610e08f6f3104bce8fcc83bf9d3f9c0ef1257d9cc0998e7026bfa363dfe719a0
+  metadata.gz: f06c0958f60ffbfda0e0f27ea01e787ff465bcd59ce65b1cb666d95f8c860d297d752e643e4bf094f091e100101b9c8c9dba7458187e2718b9d91ba5bdfc9c7b
+  data.tar.gz: 9f25b7816179509c5fc5bf10f8cf96d6ba77d87f06cd76cd0a128d563876fd21a72bcbb895b2d22b746f1ae6181277fb108011993f474ec217264b22892d7b26

data/lib/dependabot/nuget/update_checker/repository_finder.rb

@@ -166,6 +166,11 @@ module Dependabot
               }
             end
 
+          disabled_sources = disabled_sources(doc)
+          sources.reject! do |s|
+            disabled_sources.include?(s[:key])
+          end
+
           unless doc.css("configuration > packageSources > clear").any?
             sources << { url: DEFAULT_REPOSITORY_URL, key: nil }
           end
@@ -198,6 +203,20 @@ module Dependabot
           }
         end
 
+        # rubocop:disable Metrics/PerceivedComplexity
+        def disabled_sources(doc)
+          doc.css("configuration > disabledPackageSources > add").map do |node|
+            value = node.attribute("value")&.value ||
+                    node.at_xpath("./value")&.content
+
+            if value&.strip&.downcase == "true"
+              node.attribute("key")&.value&.strip ||
+                node.at_xpath("./key")&.content&.strip
+            end
+          end
+        end
+        # rubocop:enable Metrics/PerceivedComplexity
+
         # rubocop:disable Metrics/PerceivedComplexity
         def add_config_file_credentials(sources:, doc:)
           sources.each do |source_details|

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-nuget
 version: !ruby/object:Gem::Version
-  version: 0.138.1
+  version: 0.138.6
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-03-17 00:00:00.000000000 Z
+date: 2021-03-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.138.1
+        version: 0.138.6
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.138.1
+        version: 0.138.6
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement