Update signed manifest to 7.28.4

manifest.json

@@ -1,11 +1,11 @@
 {
-    "version": "7.23.30",
-    "released_at": "2026-08-12T13:24:00+00:00",
-    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.23.30/argus-wordpress-defence-7.23.30.zip",
-    "sha256": "81751849589995c4830915bb28a1b7983063571cfd3d728cac98457294e74703",
+    "version": "7.28.4",
+    "released_at": "2026-09-02T15:15:16+00:00",
+    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.28.4/argus-wordpress-defence-7.28.4.zip",
+    "sha256": "cf52ee57ad4a7b8bacebf65311e4aafbcf7ec01b43ce195a88219acf3a05b316",
     "min_php": "7.4",
     "min_wp": "6.0",
     "critical": false,
-    "summary": "* Findings quality: routine, expected activity from legitimate plugins (like WooCommerce's cart/\n  checkout endpoints and Jetpack's public API) no longer shows up as a security issue just because\n  it doesn't require login -- ARGUS now recognizes it as normal.\n* Fixed a real false-positive: a legitimate WordPress core update could previously be flagged as a\n  suspicious file appearing or disappearing inside WordPress core. It's now correctly recognized as\n  an expected part of the update.\n* Fixed: repeated attacks matching the same firewall rule from different sources no longer create a\n  growing pile of near-identical findings -- they're now tracked as one finding with an occurrence\n  count, so your Findings list stays readable.\n* Fixed: a vulnerability finding (including \"WordPress core is out of date\") now automatically\n  clears itself once you actually update the affected plugin, theme, or WordPress core -- it no\n  longer stays open forever, or gets duplicated every time a newer version comes out.\n* Each finding now shows how confident ARGUS actually is (Confirmed, High confidence, Likely,\n  Suspicious, or Informational), so it's clear what's been verified versus what's an inference.\n* \"Resolve All Open\" is now \"Archive All Open\" -- same one-click way to clear your queue, but it no\n  longer implies everything was fixed; archived findings stay fully available in your history.\n* ARGUS now periodically checks its own health in the background (its files, database, scanner,\n  firewall, quarantine storage, and update mechanism) and can fix common problems automatically;\n  if something stays broken, you'll see it as a finding until it's verified resolved.\n* Two-factor authentication data is now fully removed when you uninstall the plugin.\n* Backups page: new charts showing your backup success/failure history and size trend over time.\n* License page: \"What's Included\" is now a simple, readable list instead of a dense table.",
-    "signature": "6p5dKzyfdivTHNN9qeMBQVVM9V3kb/fMWdTDvSj81Bp5wLuxOc/nVHerdoU2NMIleLjlhKGzQwpvt75shnabDw=="
+    "summary": "* Fixed a bug where a brute-force login attack that ARGUS had already blocked could keep showing\n  as an active finding and unnecessarily lower your Security Score, even though the attack was\n  already stopped. Blocked attacks are now correctly marked as automatically handled.",
+    "signature": "Se38Rj8baM5nPoudeBAwd890pxtMp4i4RRb16r4j5Hi0hfLrJM7EaOy0kcayrSIUKeNaQl1lkrhToHS6/vjkDA=="
 }