Auto update remove custom API data from plugin endpoint.

[peterwilsoncc]

I was testing some of the plugins for AwesomeMotive when I noticed that [48669] in WordPress 5.5.0 breaks backwards compatibility due to a flaw in an intended fix that WordPress had done in the point release.

The change was originally intended to ensure PHP notices would not be thrown by third party plugin updaters if any of the standard plugin update info keys were not set (by then setting that to a default) but instead it has the unintended purpose of stripping additional plugin keys.

In ​class-wp-plugins-list-table.php and ​class-wp-debug-data.php the plugins auto-update routine uses array_intersect_key() instead of wp_parse_args() to merge API response data with the default values.

This removes any custom values from the plugin's update API response when displaying the enable/disable link and displaying debug data in the site health check.

Many plugin updates add additional plugin data keys to the response this can cause issues. Further, this also breaks the ability for testing of patches for WordPress core/meta, as, for example, the patch to add a requires_wp header (to allow plugins to declare a minimum WP version) can no longer be fully tested since its stripped out.

With this patch, I've changed it from using an array_intersect_key() to the standard WordPress function for ensuring default array keys are present wp_parse_args() which both preserves the originally intended protection from missing keys while fixing the breakage caused by the patch that was merged.

[chriscct7]

Tested the patch and it works for me.

[hellofromTonya]

5.5.3 shipped last week. Not planning another 5.5 minor release. Instead, moving this ticket into 5.6.

[audrasjb]

Indeed, the patch makes sense to me.
It applies cleanly and the is no change on the current behavior.

Good to go on my side :)

[hellofromTonya]

Thanks @audrasjb and @chriscct7 for testing. This ticket is ready for commit.

[desrosj]

In 49477:

Upgrade/Install: Prevent removal of additional data from plugin update info.

This switches to using wp_parse_args() instead of a combination of array_merge() and array_intersect_key() when ensuring that all expected default keys are present in the update information for a plugin.

This prevents non-default data returned by 3rd-party plugins from being unintentionally stripped out.

Props peterwilsoncc, chriscct7.
Fixes #51609.