Update signed manifest to 7.28.5

manifest.json

@@ -1,11 +1,11 @@
 {
-    "version": "7.24.2",
-    "released_at": "2026-08-14T08:06:56+00:00",
-    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.24.2/argus-wordpress-defence-7.24.2.zip",
-    "sha256": "0f64ba7ef966b356210e7df100ddc9a38e711775f332071c4656c6c749f47cae",
+    "version": "7.28.5",
+    "released_at": "2026-09-02T16:09:39+00:00",
+    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.28.5/argus-wordpress-defence-7.28.5.zip",
+    "sha256": "f5574faa92ef31247d15f462d67bf7743b3e22b7c3e24fac4e0ccb80708ded38",
     "min_php": "7.4",
     "min_wp": "6.0",
-    "critical": false,
-    "summary": "* Redesigned the Scanner: scans now run in the background with live progress instead of tying up\n  the page, so they never time out on large sites and you can keep working while one runs. Added a\n  Stop button and expandable details on each past scan.\n* Minor wording fix on the Settings page.",
-    "signature": "c0I35menVOQCWdKWsV7znbRD38fkEsrpnbYZYj2sFV3brS2CbiqClBqjhPJv1CzU2E/2R2kKM1C7uvwY06P8AA=="
+    "critical": true,
+    "summary": "* Fixed a serious bug where the firewall could block a real visitor (including search engines\n  like Google) on sites using certain page-builder widgets, showing them a \"Forbidden\" page\n  instead of your content -- and could go on to ban their IP address, keeping them locked out.\n* The firewall no longer bans a visitor's IP address after a single suspicious-looking request --\n  it still blocks that one request immediately as before, but only bans the IP once a real\n  pattern of repeated or combined attack behavior is seen. Genuine attacks are still detected and\n  blocked exactly as before; this only prevents an isolated false alarm from locking someone out.",
+    "signature": "tkLviBtuKf9NjiCMOAyLyc3mUH+hvI7zy9CV4B4qUdmkz0m8CqPzYqqIrUxEtL4GFgTtmLMZA1T3w/I1O1CLCg=="
 }