Update signed manifest to 7.40.0

manifest.json

@@ -1,11 +1,11 @@
 {
-    "version": "7.29.0",
-    "released_at": "2026-09-10T15:52:10+00:00",
-    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.29.0/argus-wordpress-defence-7.29.0.zip",
-    "sha256": "173a41c195e2a2eaca2bb9ecc3bb158860e408da424c2bc91e324ed1dcc0406e",
+    "version": "7.40.0",
+    "released_at": "2026-09-17T10:42:49+00:00",
+    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.40.0/argus-wordpress-defence-7.40.0.zip",
+    "sha256": "9fc415ef804bfd2f584fbaeb69660a0ef963e52773d0c8913cd40d56a78ccd29",
     "min_php": "7.4",
     "min_wp": "6.0",
     "critical": false,
-    "summary": "* New: Form Protection -- stops automated spam and abuse on comments, registration, and popular\n  contact-form plugins (Contact Form 7, WPForms, Gravity Forms), with no CAPTCHA and nothing for\n  real visitors to prove. It also protects any other form on your site out of the box, including\n  hand-written and page-builder forms, with no setup required.\n* Several independent signals -- not just one rule -- are combined into a single risk score, so\n  people sharing an office, school or mobile network are never blocked just for their address\n  being busy.\n* New Form Protection page: see what was blocked or held for review, which forms are being\n  targeted, and adjust sensitivity, trusted addresses, and logging to match your site.",
-    "signature": "qCUCj+i22/p54BLXp4GgS7VVuJHWyQZmdfRzyCEM2prOtw3iCfXTQuvtDVv4RHq9ojGmPuSndkazbUUgMXzNCg=="
+    "summary": "* Security hardening: this site's IP-based protections (firewall, brute-force login protection,\n  REST/API abuse protection, WooCommerce checkout guard, two-factor) now correctly recognise real\n  visitor IP addresses when this site runs behind a reverse proxy, load balancer, or CDN, using the\n  same trusted-proxy configuration already available under Form Protection. Previously, sites in\n  that setup could see every visitor as the same address, weakening these protections.\n* Hardened the replay protection added in 7.39.0 further: it now remembers a short history of\n  recently-applied WAD actions instead of only the single most recent one.",
+    "signature": "n97VtOxZFjpDmUbFgbzjnf34nCcGUtGthdhs/oypEyEkidWgY6OiTt4WXUkz3ICEh5RJef9nfYxkyJeNaw1gBQ=="
 }