Update signed manifest to 7.40.0

manifest.json

@@ -1,11 +1,11 @@
 {
-    "version": "7.24.2",
+    "version": "7.40.0",
-    "released_at": "2026-08-14T08:06:56+00:00",
+    "released_at": "2026-09-17T10:42:49+00:00",
-    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.24.2/argus-wordpress-defence-7.24.2.zip",
+    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.40.0/argus-wordpress-defence-7.40.0.zip",
-    "sha256": "0f64ba7ef966b356210e7df100ddc9a38e711775f332071c4656c6c749f47cae",
+    "sha256": "9fc415ef804bfd2f584fbaeb69660a0ef963e52773d0c8913cd40d56a78ccd29",
     "min_php": "7.4",
     "min_wp": "6.0",
     "critical": false,
-    "summary": "* Redesigned the Scanner: scans now run in the background with live progress instead of tying up\n  the page, so they never time out on large sites and you can keep working while one runs. Added a\n  Stop button and expandable details on each past scan.\n* Minor wording fix on the Settings page.",
+    "summary": "* Security hardening: this site's IP-based protections (firewall, brute-force login protection,\n  REST/API abuse protection, WooCommerce checkout guard, two-factor) now correctly recognise real\n  visitor IP addresses when this site runs behind a reverse proxy, load balancer, or CDN, using the\n  same trusted-proxy configuration already available under Form Protection. Previously, sites in\n  that setup could see every visitor as the same address, weakening these protections.\n* Hardened the replay protection added in 7.39.0 further: it now remembers a short history of\n  recently-applied WAD actions instead of only the single most recent one.",
-    "signature": "c0I35menVOQCWdKWsV7znbRD38fkEsrpnbYZYj2sFV3brS2CbiqClBqjhPJv1CzU2E/2R2kKM1C7uvwY06P8AA=="
+    "signature": "n97VtOxZFjpDmUbFgbzjnf34nCcGUtGthdhs/oypEyEkidWgY6OiTt4WXUkz3ICEh5RJef9nfYxkyJeNaw1gBQ=="
 }