Page 76 - Mironsoft Blog

Magento B2B ships company management, approval workflows, negotiable quotes and requisition lists by default as Luma components built on Knockout.js and UI components, none of which work in a Hyvä theme because Hyvä removes exactly this layer. Anyone who still wants to map B2B features cleanly in the frontend needs ViewModels for the company context, Alpine.js for interactive states, and targeted layout XML overrides of the Luma templates.

A .gitlab-ci.yml with only three jobs and no defined stages is not a deployment process, it is a script that will eventually break. Deploying Magento cleanly requires a complete pipeline structure: reproducible build artifacts, defined approvals, server side release directories, controlled Magento steps and a functionally complete verify job.

An oversized INT, a VARCHAR field that should really be TEXT, or FLOAT instead of DECIMAL for money add up in large tables to significant, often overlooked storage cost and performance loss. Choosing the right data type is one of the cheapest optimizations in the entire database design. This article explains the most important data type decisions with concrete sizing rules.

Pure BM25 scoring only knows text relevance, no business goals. The Function Score Query closes this gap by combining the textual score with additional factors such as sales figures, stock level, or freshness. Anyone who masters field_value_factor and decay functions can steer search results deliberately by business logic without sacrificing textual relevance.

A bug bounty program rewards external security researchers for responsibly reporting vulnerabilities, but it only works with a clearly defined scope, tiered rewards, and a mature internal vulnerability management process. This article explains how private and public programs differ, when a company is actually ready, which platforms can help, and how to professionally handle the first real submission that comes in.

Docker Bench Security automatically checks host, daemon and running containers against the CIS Docker Benchmark and produces a structured report within minutes. Reading that output correctly, prioritizing it and wiring it into the CI pipeline turns a one time audit into a continuous security process instead of an ignored PDF file.

A shared GraphQL API for multiple tenants saves infrastructure, but carries a real risk: one forgotten tenant filter in a resolver, and tenant A sees tenant B's data. Building tenant isolation systematically instead of ad hoc avoids exactly that scenario.

A misconfigured health check is more dangerous than none at all. Kubernetes restarts healthy pods because a liveness probe was written too strictly, or sends traffic to a pod whose database connection dropped long ago. This article shows how a health check for Symfony in Kubernetes becomes truly reliable, with liveness, readiness and startup probes working together.

Few topics currently cause as much uncertainty as the EU's NIS2 Directive. Many shop owners wonder whether new obligations are suddenly heading their way, even though they have nothing to do with classic critical infrastructure. The good news first: most medium-sized and small online shops are not directly affected. Still, a calm look at the topic is worthwhile, because the underlying expectations increasingly reach shops through business partners, banks and payment providers. We explain what this is about and what you can calmly look into.

An unconstrained generic type parameter accepts almost anything and thereby blocks any meaningful access to properties or methods. With the extends keyword, keyof, and well-designed default values, type parameters can be deliberately narrowed so the compiler catches real errors and developers get reliable autocomplete while writing code. This article uses a typed pick-fields function to show how these concepts work together.