Page 13 - Monthly Archives: November 2025

A custom payment method integration in Magento 2 is not a simple form with account details, it is a complete gateway connection with authorization, capture, cancellation and asynchronous status updates. The Payment Gateway Command Pattern structures these building blocks so an external payment provider can be connected without any core overrides.

Containers share the host kernel, so they are not an automatic security win over classic servers. This article shows how minimal base images, non-root users, automated vulnerability scanning in the CI pipeline, secure secrets handling without image layer leaks, and a hardened runtime with a read-only filesystem and reduced Linux capabilities make Docker deployments for Magento and PHP projects noticeably safer.

Dense vector search requires an embedding model, an inference pipeline, and usually its own GPU infrastructure before the very first semantic query can even be answered. For many teams that exact hurdle is the reason semantic search gets shelved despite its benefits. ELSER, short for Elastic Learned Sparse EncodeR, takes a different approach: instead of turning text into a dense vector of several hundred numbers, the model produces a weighted list of relevant terms, comparable to an automatically expanded and weighted word list. The result can be searched with the same inverted index structures Elasticsearch already uses for classic text search. This article explains how ELSER works technically, how sparse vectors differ from dense vectors, and what practical product search adoption looks like without in-house machine learning infrastructure.

Once a team maintains more than a handful of internal PHP packages, distributing deploy keys and personal GitHub tokens in every single composer.json quickly becomes a security risk. Private Packagist bundles private Composer packages in its own registry with centralized permission management, without developers having to maintain their own credentials.

The proc filesystem is not a collection of ordinary files, it is a virtual window straight into the running Linux kernel. Knowing which files under /proc/[pid] and /proc/sys actually matter lets you read process state, CPU load, memory usage and kernel parameters without relying on top, ps or sysctl, while understanding exactly how those tools work internally.

A Varnish, Redis and OpenSearch sidecar with default configuration runs, but rarely delivers the performance a Magento shop needs under real load. This article shows how these three sidecars are deliberately fine-tuned as containers, from VCL rules through eviction policies to JVM heap sizing, instead of relying on factory defaults.

Hasura turns an existing PostgreSQL database into a complete GraphQL API within seconds, including filtering, sorting, pagination and relationships, without writing a single resolver. The approach fits certain scenarios extremely well and is completely unsuitable for others. This article shows exactly where that line runs.

Trunk-based development replaces long feature branches with short-lived ones that flow back into the main branch several times a day. Feature flags make it possible to ship unfinished work safely without endangering the application, while a fast, reliable CI pipeline checks every commit for regressions immediately and keeps the main branch permanently releasable.

A test suite that grows organically alongside production code over years almost inevitably accumulates the same kinds of decay as the production code itself: copied test cases that differ in only a single value, outdated helper functions nobody dares to delete anymore, and setup blocks that look nearly identical from one test case to the next but are never quite the same. Unlike production code refactoring, though, test code refactoring lacks a crucial safety net: there is no second test suite checking whether the first one still works correctly, which is why refactoring tests themselves needs particular care.

Minified JavaScript without source maps turns every production error into a guessing game over cryptic line numbers. But shipping source maps publicly right next to the bundle exposes your commented TypeScript source to every visitor. Hidden source maps combined with a controlled upload to an error-tracking service solve this dilemma cleanly.