Mute PHP notice from Session unserialize

composer.json

@@ -106,7 +106,7 @@
 			"@test"
 		],
 		"fix": "php-cs-fixer fix",
-		"test": "phpunit --stderr --display-warnings",
+		"test": "phpunit --stderr",
 		"test:coverage": "XDEBUG_MODE=coverage phpunit --stderr --coverage-html=tests/coverage",
 		"zip": "composer archive --format=zip --file=dist"
 	}

phpunit.xml.dist

@@ -6,6 +6,12 @@
 	colors="true"
 	stderr="true"
 	cacheDirectory=".phpunit.cache"
+	displayDetailsOnIncompleteTests="true"
+	displayDetailsOnSkippedTests="true"
+	displayDetailsOnTestsThatTriggerDeprecations="true"
+	displayDetailsOnTestsThatTriggerErrors="true"
+	displayDetailsOnTestsThatTriggerNotices="true"
+	displayDetailsOnTestsThatTriggerWarnings="true"
 >
 	<source>
 		<include>

src/Session/Session.php

@@ -11,7 +11,6 @@
 use Kirby\Http\Url;
 use Kirby\Toolkit\Str;
 use Kirby\Toolkit\SymmetricCrypto;
-use Throwable;
 
 /**
  * @package   Kirby Session
@@ -661,6 +660,7 @@ protected function init(): void
 		// skip if we don't have the key (only the case for moved sessions)
 		$hmac = Str::before($data, "\n");
 		$data = trim(Str::after($data, "\n"));
+
 		if (
 			$this->tokenKey !== null &&
 			hash_equals(hash_hmac('sha256', $data, $this->tokenKey), $hmac) !== true
@@ -675,7 +675,7 @@ protected function init(): void
 		}
 
 		// decode the serialized data
-		$data = unserialize($data);
+		$data = @unserialize($data);
 
 		if ($data === false) {
 			throw new LogicException([