Update signed manifest to 7.37.1

manifest.json

@@ -1,11 +1,11 @@
 {
-    "version": "7.29.2",
-    "released_at": "2026-09-14T09:33:45+00:00",
-    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.29.2/argus-wordpress-defence-7.29.2.zip",
-    "sha256": "1d5298ce27eaf2ed6f0290a708e652abbd28e5e4d474f196e1ecb4ea8ff6ae1b",
+    "version": "7.37.1",
+    "released_at": "2026-09-15T16:45:42+00:00",
+    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.37.1/argus-wordpress-defence-7.37.1.zip",
+    "sha256": "daa33299e82da0d1ae6af271b9f6795f57e7ee11fe034b34e1ebc5ad6478daae",
     "min_php": "7.4",
     "min_wp": "6.0",
     "critical": false,
-    "summary": "* Fixed a bug where the Scanner's very first check of your site (or one run after resetting it)\n  could flag every core WordPress file as suspicious at once, dropping your Security Score to 0\n  for no real reason. A first-time check now quietly learns what your site looks like, exactly\n  like every check after it, and only flags files that are genuinely new or changed.",
-    "signature": "gkSLRMxz9Gzzq5Aon9HLOvrf12jLkJ/ygWvG8ud+BSBgsA6DImiVbvTeZtnXd1jM4EJBvuLE9s9006rxy89zBA=="
+    "summary": "* Hardening for the WAD remote settings added in 7.37.0: a remotely-adjusted custom login URL now\n  goes through the exact same safety checks as changing it here in wp-admin (it can no longer be\n  set to something that collides with a reserved WordPress path), and a value of the wrong type\n  for a setting is rejected instead of applied.",
+    "signature": "ugEaoL+TpncC8umJYEowzA5X8qFYlRyRVEU8Jt+6f0g0RXRErGzaWNJ3++ZD7Rry/umppR7TQhVjxAVuLOtsDg=="
 }