Serializable is banned

Author: nicolas-grekas

.github/workflows/lint.yaml

@@ -54,7 +54,7 @@ jobs:
 
             - name: "Composer install"
               id: install
-              run: composer install --no-interaction --no-progress --no-scripts
+              run: composer install --no-interaction --no-progress
 
             - name: Lint YAML files
               if: always() && steps.install.outcome == 'success'

src/Entity/User.php

@@ -29,7 +29,7 @@
  * @author Ryan Weaver <[email protected]>
  * @author Javier Eguiluz <[email protected]>
  */
-class User implements UserInterface, PasswordAuthenticatedUserInterface, \Serializable
+class User implements UserInterface, PasswordAuthenticatedUserInterface
 {
     /**
      * @var int
@@ -177,18 +177,18 @@ public function eraseCredentials(): void
     /**
      * {@inheritdoc}
      */
-    public function serialize(): string
+    public function __serialize(): array
     {
         // add $this->salt too if you don't use Bcrypt or Argon2i
-        return serialize([$this->id, $this->username, $this->password]);
+        return [$this->id, $this->username, $this->password];
     }
 
     /**
      * {@inheritdoc}
      */
-    public function unserialize($serialized): void
+    public function __unserialize(array $data): void
     {
         // add $this->salt too if you don't use Bcrypt or Argon2i
-        [$this->id, $this->username, $this->password] = unserialize($serialized, ['allowed_classes' => false]);
+        [$this->id, $this->username, $this->password] = $data;
     }
 }