Update signed manifest to 7.37.1

manifest.json

@@ -1,11 +1,11 @@
 {
-    "version": "7.28.4",
-    "released_at": "2026-09-02T15:15:16+00:00",
-    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.28.4/argus-wordpress-defence-7.28.4.zip",
-    "sha256": "cf52ee57ad4a7b8bacebf65311e4aafbcf7ec01b43ce195a88219acf3a05b316",
+    "version": "7.37.1",
+    "released_at": "2026-09-15T16:45:42+00:00",
+    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.37.1/argus-wordpress-defence-7.37.1.zip",
+    "sha256": "daa33299e82da0d1ae6af271b9f6795f57e7ee11fe034b34e1ebc5ad6478daae",
     "min_php": "7.4",
     "min_wp": "6.0",
     "critical": false,
-    "summary": "* Fixed a bug where a brute-force login attack that ARGUS had already blocked could keep showing\n  as an active finding and unnecessarily lower your Security Score, even though the attack was\n  already stopped. Blocked attacks are now correctly marked as automatically handled.",
-    "signature": "Se38Rj8baM5nPoudeBAwd890pxtMp4i4RRb16r4j5Hi0hfLrJM7EaOy0kcayrSIUKeNaQl1lkrhToHS6/vjkDA=="
+    "summary": "* Hardening for the WAD remote settings added in 7.37.0: a remotely-adjusted custom login URL now\n  goes through the exact same safety checks as changing it here in wp-admin (it can no longer be\n  set to something that collides with a reserved WordPress path), and a value of the wrong type\n  for a setting is rejected instead of applied.",
+    "signature": "ugEaoL+TpncC8umJYEowzA5X8qFYlRyRVEU8Jt+6f0g0RXRErGzaWNJ3++ZD7Rry/umppR7TQhVjxAVuLOtsDg=="
 }