Update signed manifest to 7.29.0

manifest.json

@@ -1,11 +1,11 @@
 {
-    "version": "7.23.14",
-    "released_at": "2026-08-10T10:42:30+00:00",
-    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.23.14/argus-wordpress-defence-7.23.14.zip",
-    "sha256": "6b2365b173bd8e583a5d04021d205c773f927217b4870fc3ebff8c298c53367b",
+    "version": "7.29.0",
+    "released_at": "2026-09-10T15:52:10+00:00",
+    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.29.0/argus-wordpress-defence-7.29.0.zip",
+    "sha256": "173a41c195e2a2eaca2bb9ecc3bb158860e408da424c2bc91e324ed1dcc0406e",
     "min_php": "7.4",
     "min_wp": "6.0",
-    "critical": true,
-    "summary": "* Fixed a serious bug: the Firewall could block ordinary visitors just for arriving from an\n  everyday link -- for example, a link shared on Facebook, whose own redirect URL happened to\n  match a pattern the Firewall treated as suspicious. The underlying cause was broader than that\n  one case: 132 of the Firewall's 137 protection rules were checking a visitor's Referer,\n  User-Agent, and X-Forwarded-For information -- values a visitor doesn't control -- when they\n  should only ever have been checking what a visitor actually submits (search terms, form fields,\n  comments, and similar). Those three values are now excluded everywhere except the handful of\n  rules that specifically need them (Log4Shell-style attacks are delivered through exactly those\n  values, so detection there is unchanged). No settings change needed; this takes effect\n  automatically.",
-    "signature": "l3gHdqDlNbkuk88XuJpVOMiAbAMNVoht7lVJ0UgkgvcLgDUTmcnaYS9g6XoHqH6sPTkmLA6TL2SYe3d2d1NOCA=="
+    "critical": false,
+    "summary": "* New: Form Protection -- stops automated spam and abuse on comments, registration, and popular\n  contact-form plugins (Contact Form 7, WPForms, Gravity Forms), with no CAPTCHA and nothing for\n  real visitors to prove. It also protects any other form on your site out of the box, including\n  hand-written and page-builder forms, with no setup required.\n* Several independent signals -- not just one rule -- are combined into a single risk score, so\n  people sharing an office, school or mobile network are never blocked just for their address\n  being busy.\n* New Form Protection page: see what was blocked or held for review, which forms are being\n  targeted, and adjust sensitivity, trusted addresses, and logging to match your site.",
+    "signature": "qCUCj+i22/p54BLXp4GgS7VVuJHWyQZmdfRzyCEM2prOtw3iCfXTQuvtDVv4RHq9ojGmPuSndkazbUUgMXzNCg=="
 }