Add Fiber-native concurrent task groups

.github/CODE_OF_CONDUCT.md

@@ -1,3 +1,3 @@
 # Code of Conduct
 
-The Doppar Code of Conduct can be found in the [Doppar documentation](https://doppar.com/versions/3.x/contributions.html#code-of-conduct).
+The Doppar Code of Conduct can be found in the [Doppar documentation](https://doppar.com/versions/4.x/contributions#code-of-conduct).

.github/CONTRIBUTING.md

@@ -1,3 +1,3 @@
 # Doppar Contribution Guide
 
-The Doppar contributing guide can be found in the [Doppar documentation](https://doppar.com/versions/3.x/contributions.html#contribution-guide).
+The Doppar contributing guide can be found in the [Doppar documentation](https://doppar.com/versions/4.x/contributions#contribution-guide).

.github/PULL_REQUEST_TEMPLATE.md

@@ -1,7 +1,25 @@
-<!--
-If you are unsure which branch your pull request should be sent to, please read: https://doppar.com/versions/3.x/contributions.html#which-branch
+## Pull Request Checklist
+
+| Q             | A   |
+| ------------- | --- |
+| Branch?       | 4.x |
+| Bug fix?      | yes |
+| New feature?  | no  |
+| Deprecations? | no  |
+| Issues        | -   |
+| License       | MIT |
+
+## Description
 
+<!--
+Explain what this pull request changes.
+If you are unsure which branch your pull request should be sent to, please read: https://doppar.com/versions/4.x/contributions#which-branch
 Pull requests without a descriptive title, thorough description, or tests will be closed.
+-->
+
+## Checklist
 
-In addition, please describe the benefit to end users; the reasons it does not break any existing features; how it makes building web applications easier, etc.
--->
+- [ ] Tests have been added or updated
+- [ ] Documentation has been updated if necessary
+- [ ] Code follows the project coding standards
+- [ ] All tests pass locally

.github/SECURITY.md

@@ -4,7 +4,7 @@
 
 ## Reporting a Vulnerability
 
-If you discover a security vulnerability within Doppar, please send an email to Mahedi Hasan at mahedi@doppar.com. All security vulnerabilities will be promptly addressed. Please see [Reporting a Vulnerability](https://doppar.com/versions/3.x/contributions.html#security-vulnerabilities)
+If you discover a security vulnerability within Doppar, please send an email to Mahedi Hasan at mahedi@doppar.com. All security vulnerabilities will be promptly addressed. Please see [Reporting a Vulnerability](https://doppar.com/versions/4.x/contributions#security-vulnerabilities)
 
 ### Public PGP Key
 

.github/SUPPORT.md

@@ -1,3 +1,3 @@
 # Support Questions
 
-The Doppar support guide can be found in the [Doppar documentation](https://doppar.com/versions/3.x/contributions.html).
+The Doppar support guide can be found in the [Doppar documentation](https://doppar.com/versions/4.x/contributions).

.github/dependabot.yml

@@ -0,0 +1,13 @@
+version: 2
+
+updates:
+  - package-ecosystem: composer
+    directory: /
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 10
+
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly

.github/workflows/security-analysis.yml

@@ -0,0 +1,71 @@
+name: security analysis
+
+on:
+  push:
+    branches:
+      - master
+      - '*.x'
+  pull_request:
+  schedule:
+    - cron: '0 3 * * *'
+
+permissions:
+  contents: read
+
+jobs:
+  composer-audit:
+    runs-on: ubuntu-24.04
+
+    name: Composer audit
+
+    permissions:
+      contents: read
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup PHP
+        uses: shivammathur/setup-php@v2
+        with:
+          php-version: 8.5
+          tools: composer:v2
+          coverage: none
+
+      - name: Set Framework version
+        run: composer config version "2.x-dev"
+
+      - name: Install dependencies
+        uses: nick-fields/retry@v3
+        with:
+          timeout_minutes: 5
+          max_attempts: 5
+          command: composer update --prefer-stable --prefer-dist --no-interaction --no-progress
+
+      - name: Audit dependencies for known vulnerabilities
+        run: composer audit --no-dev --format=table --locked
+
+  semgrep:
+    runs-on: ubuntu-24.04
+
+    name: Semgrep
+
+    permissions:
+      contents: read
+      security-events: write
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Run Semgrep
+        uses: semgrep/semgrep-action@v1
+        with:
+          config: p/security-audit p/php
+          generateSarif: '1'
+
+      - name: Upload SARIF results
+        if: always()
+        uses: github/codeql-action/upload-sarif@v3
+        with:
+          sarif_file: semgrep.sarif

.github/workflows/static-analysis.yml

@@ -16,7 +16,7 @@ jobs:
       matrix:
         directory: [src]
 
-    name: ${{ matrix.directory == 'src'}}
+    name: PHPStan (${{ matrix.directory }})
 
     steps:
       - name: Checkout code
@@ -25,7 +25,7 @@ jobs:
       - name: Setup PHP
         uses: shivammathur/setup-php@v2
         with:
-          php-version: 8.3
+          php-version: 8.5
           tools: composer:v2
           coverage: none
 
@@ -37,4 +37,7 @@ jobs:
         with:
           timeout_minutes: 5
           max_attempts: 5
-          command: composer update --prefer-stable --prefer-dist --no-interaction --no-progress
+          command: composer update --prefer-stable --prefer-dist --no-interaction --no-progress
+
+      - name: Run PHPStan
+        run: composer analyse -- --no-progress --error-format=github

.github/workflows/tests.yml

@@ -31,16 +31,9 @@ jobs:
     strategy:
       fail-fast: true
       matrix:
-        php: [8.3, 8.4, 8.5]
-        phpunit: ['12.5.0', '12.5.8']
+        php: [8.5]
+        phpunit: ['13.3.0', '13.3.1']
         stability: [prefer-lowest, prefer-stable]
-        exclude:
-          - php: 8.3
-            phpunit: '12.0.0'
-          - php: 8.4
-            phpunit: '12.0.0'
-          - php: 8.5
-            phpunit: '12.0.0'
 
     name: PHP ${{ matrix.php }} - PHPUnit ${{ matrix.phpunit }} - ${{ matrix.stability }}
 
@@ -61,7 +54,7 @@ jobs:
           REDIS_LIBS: liblz4-dev, liblzf-dev, libzstd-dev
 
       - name: Set Framework version
-        run: composer config version "2.x-dev"
+        run: composer config version "4.x-dev"
 
       - name: Install dependencies
         uses: nick-fields/retry@v3
@@ -123,14 +116,14 @@ jobs:
           coverage: none
 
       - name: Set Framework version
-        run: composer config version "2.x-dev"
+        run: composer config version "4.x-dev"
 
       - name: Install dependencies
         uses: nick-fields/retry@v3
         with:
           timeout_minutes: 5
           max_attempts: 5
-          command: composer update --prefer-stable --prefer-dist --no-interaction --no-progress --with="phpunit/phpunit:~12.5.8"
+          command: composer update --prefer-stable --prefer-dist --no-interaction --no-progress --with="phpunit/phpunit:~13.3.1"
 
       - name: Execute MySQL model query tests
         if: matrix.driver == 'mysql'
@@ -168,16 +161,9 @@ jobs:
     strategy:
       fail-fast: true
       matrix:
-        php: [8.3, 8.4, 8.5]
-        phpunit: ['12.5.0', '12.5.8']
+        php: [8.5]
+        phpunit: ['13.3.0', '13.3.1']
         stability: [prefer-lowest, prefer-stable]
-        exclude:
-          - php: 8.3
-            phpunit: '12.0.0'
-          - php: 8.4
-            phpunit: '12.0.0'
-          - php: 8.5
-            phpunit: '12.0.0'
 
     name: PHP ${{ matrix.php }} - PHPUnit ${{ matrix.phpunit }} - ${{ matrix.stability }} - Windows
 
@@ -199,7 +185,7 @@ jobs:
           coverage: none
 
       - name: Set Framework version
-        run: composer config version "2.x-dev"
+        run: composer config version "4.x-dev"
 
       - name: Install dependencies
         uses: nick-fields/retry@v3

.gitignore

@@ -1,4 +1,5 @@
 /.phpunit.cache
+/.phpstan.cache
 /vendor
 /storage
 composer.phar