[6.x] Fix Eloquent user data setting roles and groups as model attributes

src/Auth/Eloquent/User.php

@@ -52,7 +52,7 @@ public function data($data = null)
             return collect(Arr::except($data, ['id', 'email']));
         }
 
-        foreach ($data as $key => $value) {
+        foreach (Arr::except($data, ['roles', 'groups']) as $key => $value) {
             $this->set($key, $value);
         }
 

tests/Auth/Eloquent/EloquentUserTest.php

@@ -350,6 +350,20 @@ public function merge_does_not_set_roles_and_groups_as_model_attributes()
         $this->assertEquals('Updated Name', $attributes['name']);
     }
 
+    #[Test]
+    public function data_does_not_set_roles_and_groups_as_model_attributes()
+    {
+        $user = $this->user();
+
+        $user->data($user->data()->merge(['name' => 'Updated Name'])->all());
+
+        $attributes = $user->model()->getAttributes();
+
+        $this->assertArrayNotHasKey('roles', $attributes);
+        $this->assertArrayNotHasKey('groups', $attributes);
+        $this->assertEquals('Updated Name', $attributes['name']);
+    }
+
     #[Test]
     #[Group('passkeys')]
     public function it_gets_passkeys()