Update signed manifest to 7.40.0

manifest.json

@@ -1,11 +1,11 @@
 {
-    "version": "7.25.3",
-    "released_at": "2026-08-14T12:51:12+00:00",
-    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.25.3/argus-wordpress-defence-7.25.3.zip",
-    "sha256": "9588180091a89d70455404a95bec00e6e84add2e7a829942de4857676ad5eaca",
+    "version": "7.40.0",
+    "released_at": "2026-09-17T10:42:49+00:00",
+    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.40.0/argus-wordpress-defence-7.40.0.zip",
+    "sha256": "9fc415ef804bfd2f584fbaeb69660a0ef963e52773d0c8913cd40d56a78ccd29",
     "min_php": "7.4",
     "min_wp": "6.0",
     "critical": false,
-    "summary": "* The ANIS Global Protection summary on the Overview dashboard now always agrees with Recent\n  Intelligence Activity -- it no longer says \"no threats detected\" when ANIS has actually\n  identified and blocked something.\n* The Intelligence and ANIS pages have been combined into one clearer Intelligence page.\n* Renamed \"ARGUS Cloud\" to \"ARGUS Network\" throughout, for consistency.",
-    "signature": "gGi72BFEjNOgPtUYn/G60uGyNUkpKZp5f4sRnlXHFkfFpxf4gHiicwZaY2Wlb2AUyV8kgDmIb0Hv8A7tEl6mAA=="
+    "summary": "* Security hardening: this site's IP-based protections (firewall, brute-force login protection,\n  REST/API abuse protection, WooCommerce checkout guard, two-factor) now correctly recognise real\n  visitor IP addresses when this site runs behind a reverse proxy, load balancer, or CDN, using the\n  same trusted-proxy configuration already available under Form Protection. Previously, sites in\n  that setup could see every visitor as the same address, weakening these protections.\n* Hardened the replay protection added in 7.39.0 further: it now remembers a short history of\n  recently-applied WAD actions instead of only the single most recent one.",
+    "signature": "n97VtOxZFjpDmUbFgbzjnf34nCcGUtGthdhs/oypEyEkidWgY6OiTt4WXUkz3ICEh5RJef9nfYxkyJeNaw1gBQ=="
 }