.idea/**/datasources.xml is now safe to store
Since IDEA 14 (2014), IDEA and other contemporaneous JebBrains IDEs don't store sensitive info in datasources.xml and it makes sense to version control to share project data sources among the team. dataSources.local.xml is user-specific: contain usernames and could be sensitive from a security perspective, albeit passwords could be externalized to e.g. Mac Keychain.
References: https://intellij-support.jetbrains.com/hc/en-us/articles/206544839, https://youtrack.jetbrains.com/issue/IDEA-127105