Update signed manifest to 7.40.0

manifest.json

@@ -1,11 +1,11 @@
 {
-    "version": "7.28.0",
-    "released_at": "2026-08-15T21:32:33+00:00",
-    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.28.0/argus-wordpress-defence-7.28.0.zip",
-    "sha256": "813ca3342776186aceef2dcf00e0cd74b058804b4dc8312096a132d8d79df2e2",
+    "version": "7.40.0",
+    "released_at": "2026-09-17T10:42:49+00:00",
+    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.40.0/argus-wordpress-defence-7.40.0.zip",
+    "sha256": "9fc415ef804bfd2f584fbaeb69660a0ef963e52773d0c8913cd40d56a78ccd29",
     "min_php": "7.4",
     "min_wp": "6.0",
     "critical": false,
-    "summary": "* Major dashboard refresh: Overview, Firewall, Bot Protection, Threats, Findings, Vulnerabilities,\n  Cache & Performance, and Backups all got clearer layouts, real time-range filters (15 minutes up\n  to 30 days), and easier navigation through large lists.\n* Firewall now has one unified place to view, block, unblock, and whitelist IP addresses instead\n  of two separate pages.\n* Bot Protection now includes a searchable list of known bots and how they're classified, so you\n  can see why a visitor was treated as safe, suspicious, or malicious.\n* Findings now opens on what actually needs your attention, with search and filtering by severity\n  and category.\n* Fixed a bug where scheduled quick scans always reported \"0 files scanned\" in Scan History even\n  though the scan really ran.\n* Fixed an issue where the Vulnerabilities page could show a reassuring \"no known vulnerabilities\"\n  message even when vulnerability data was actually unavailable or out of date.\n* Fixed a bug where deleting your most recent backup left the dashboard pointing at a backup that\n  no longer existed; Backups now also shows real storage usage instead of a size-history chart.\n* Fixed inaccurate wording on the License & Account page's connection status, and removed\n  background connection-check noise from the account Activity feed.\n* Audit Log stats are now always exact instead of estimated from a sample, and its list is easier\n  to page through.",
-    "signature": "FI9gLbkCfJHWZcSIiKxYB/AbBrq+W5G4NCCkk/ifGGaLIlCAPUMH673ZUJBBzqrDNYxtCyNWxng/s2NWo/KyAw=="
+    "summary": "* Security hardening: this site's IP-based protections (firewall, brute-force login protection,\n  REST/API abuse protection, WooCommerce checkout guard, two-factor) now correctly recognise real\n  visitor IP addresses when this site runs behind a reverse proxy, load balancer, or CDN, using the\n  same trusted-proxy configuration already available under Form Protection. Previously, sites in\n  that setup could see every visitor as the same address, weakening these protections.\n* Hardened the replay protection added in 7.39.0 further: it now remembers a short history of\n  recently-applied WAD actions instead of only the single most recent one.",
+    "signature": "n97VtOxZFjpDmUbFgbzjnf34nCcGUtGthdhs/oypEyEkidWgY6OiTt4WXUkz3ICEh5RJef9nfYxkyJeNaw1gBQ=="
 }