Update signed manifest to 7.28.5

manifest.json

@@ -1,11 +1,11 @@
 {
-    "version": "7.23.28",
-    "released_at": "2026-08-10T22:09:39+00:00",
-    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.23.28/argus-wordpress-defence-7.23.28.zip",
-    "sha256": "4c2b238947032bb65f7373ef712bb13f44a6f5c2d46528aefa219b2f22054eda",
+    "version": "7.28.5",
+    "released_at": "2026-09-02T16:09:39+00:00",
+    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.28.5/argus-wordpress-defence-7.28.5.zip",
+    "sha256": "f5574faa92ef31247d15f462d67bf7743b3e22b7c3e24fac4e0ccb80708ded38",
     "min_php": "7.4",
     "min_wp": "6.0",
-    "critical": false,
-    "summary": "* Redesigned the Overview page to be understandable at a glance, whether or not you know anything\n  about website security: a single \"Your website is protected\" summary explains what's happening\n  and whether you need to do anything, your protection score now explains itself (\"Why is my score\n  X?\"), findings are shown in plain language instead of technical rule names, and ARGUS can turn\n  your firewall back on for you with one click if it's ever off.\n* The Firewall page's Rule Activity and Blocked IPs tables now lead with plain language (what was\n  detected, how it was handled) instead of raw internal rule/ban codes -- the technical detail is\n  still there behind a \"Technical details\" toggle for anyone who wants it.\n* Settings is now organized into Protection, Automatic Protection, Account, and Advanced sections\n  instead of one long list of unrelated panels.\n* Calmed down the visual style throughout -- removed constant pulsing/glowing effects on routine,\n  everything-is-fine status indicators; motion is now reserved for things that actually need your\n  attention.",
-    "signature": "xfwlvA9lrR3LqV8H3ETm8HyCWXOUGSaDyfDarvfZ+6z7MblYO9pWzoYFnPcubrHeC4bKn5n1nWbF47/QE/PlCA=="
+    "critical": true,
+    "summary": "* Fixed a serious bug where the firewall could block a real visitor (including search engines\n  like Google) on sites using certain page-builder widgets, showing them a \"Forbidden\" page\n  instead of your content -- and could go on to ban their IP address, keeping them locked out.\n* The firewall no longer bans a visitor's IP address after a single suspicious-looking request --\n  it still blocks that one request immediately as before, but only bans the IP once a real\n  pattern of repeated or combined attack behavior is seen. Genuine attacks are still detected and\n  blocked exactly as before; this only prevents an isolated false alarm from locking someone out.",
+    "signature": "tkLviBtuKf9NjiCMOAyLyc3mUH+hvI7zy9CV4B4qUdmkz0m8CqPzYqqIrUxEtL4GFgTtmLMZA1T3w/I1O1CLCg=="
 }