dependabot-nuget 0.138.1 → 0.138.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9ce740544a72ef02b4b96263b14737ee5f024ce230aa8f836d507ec0613c8302
-  data.tar.gz: 8b576f8b573980b83fed8389778dfb91b29c3788063d80db9fa3d25f88c7d04b
+  metadata.gz: a0b5e9141da75af79a69d121ba4ccd178e8feeeda4f756d30b80af0ead0ccd93
+  data.tar.gz: d249603036d41f14dc0e85a175aaa8af72a23340ce8526faf3e664881112c534
 SHA512:
-  metadata.gz: d38fbd9b9df0753e9d26f108b549ad2aca7122ac31956450bb14c1bbc72fa506b14f0837415c8fcdbe3c23ef4ecb9f4e688f73ce8ebbb9e0084ffedc13ea04c6
-  data.tar.gz: 5752af1cecf49562baa03613b8a824c3d9d231fe9a95445a69ac5b1027e18100610e08f6f3104bce8fcc83bf9d3f9c0ef1257d9cc0998e7026bfa363dfe719a0
+  metadata.gz: 315dbb47fb6f0a28b71ffd769ef0350e888e8d22d28f396da81cf8393128540442499161d83a68b6d3f2bd6787a1919fd7ca4b582901e65764551f27ea1baf42
+  data.tar.gz: c85c335ae17409ea718165d02d94e3dcca781de82487118fa29ab2b36ac49b9f3f6c85fdef4d85bb74875c11ef046eeffb9ebfd8e4aa060fca312467ea579604

data/lib/dependabot/nuget/update_checker/repository_finder.rb

@@ -166,6 +166,11 @@ module Dependabot
               }
             end
 
+          disabled_sources = disabled_sources(doc)
+          sources.reject! do |s|
+            disabled_sources.include?(s[:key])
+          end
+
           unless doc.css("configuration > packageSources > clear").any?
             sources << { url: DEFAULT_REPOSITORY_URL, key: nil }
           end
@@ -198,6 +203,20 @@ module Dependabot
           }
         end
 
+        # rubocop:disable Metrics/PerceivedComplexity
+        def disabled_sources(doc)
+          doc.css("configuration > disabledPackageSources > add").map do |node|
+            value = node.attribute("value")&.value ||
+                    node.at_xpath("./value")&.content
+
+            if value&.strip&.downcase == "true"
+              node.attribute("key")&.value&.strip ||
+                node.at_xpath("./key")&.content&.strip
+            end
+          end
+        end
+        # rubocop:enable Metrics/PerceivedComplexity
+
         # rubocop:disable Metrics/PerceivedComplexity
         def add_config_file_credentials(sources:, doc:)
           sources.each do |source_details|

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-nuget
 version: !ruby/object:Gem::Version
-  version: 0.138.1
+  version: 0.138.2
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-03-17 00:00:00.000000000 Z
+date: 2021-03-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.138.1
+        version: 0.138.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.138.1
+        version: 0.138.2
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement