<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Isaac Mbira — Blog</title><description>Senior full-stack engineer and technical consultant in Nairobi, Kenya — 14+ years building cloud-native backends, AI products, and cross-platform apps.</description><link>https://isaacmbira.com/</link><item><title>Migrating isaacmbira.com from WordPress to Astro</title><link>https://isaacmbira.com/blog/migrating-wordpress-to-astro/</link><guid isPermaLink="true">https://isaacmbira.com/blog/migrating-wordpress-to-astro/</guid><description>Why I moved my portfolio off WordPress and onto Astro 5, and how the one-time content migration worked.</description><pubDate>Mon, 08 Jun 2026 00:00:00 GMT</pubDate><category>astro</category><category>wordpress</category><category>performance</category></item><item><title>Securing M-PESA Callbacks Without a Signature</title><link>https://isaacmbira.com/blog/m-pesa-callbacks-without-a-signature/</link><guid isPermaLink="true">https://isaacmbira.com/blog/m-pesa-callbacks-without-a-signature/</guid><description>Daraja sends no signature on its STK Push callback. Here is how to verify those callbacks safely anyway.</description><pubDate>Fri, 05 Jun 2026 00:00:00 GMT</pubDate><category>m-pesa</category><category>security</category><category>woocommerce</category></item></channel></rss>