doctrine/doctrine-bundle should not be a dep

composer.json

@@ -124,7 +124,6 @@
         "doctrine/data-fixtures": "^1.1",
         "doctrine/dbal": "^2.6|^3.0",
         "doctrine/orm": "^2.6.3",
-        "doctrine/doctrine-bundle": "^1.5|^2.0",
         "guzzlehttp/promises": "^1.4",
         "masterminds/html5": "^2.6",
         "monolog/monolog": "^1.25.1",

src/Symfony/Bundle/SecurityBundle/composer.json

@@ -27,7 +27,7 @@
         "symfony/security-http": "^4.4.5"
     },
     "require-dev": {
-        "doctrine/doctrine-bundle": "^1.5|^2.0",
+        "doctrine/annotations": "^1.10.4",
         "symfony/asset": "^3.4|^4.0|^5.0",
         "symfony/browser-kit": "^4.2|^5.0",
         "symfony/console": "^3.4|^4.0|^5.0",