Update signed manifest to 7.49.0

manifest.json

@@ -1,11 +1,11 @@
 {
-    "version": "7.39.6",
-    "released_at": "2026-09-16T21:29:46+00:00",
-    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.39.6/argus-wordpress-defence-7.39.6.zip",
-    "sha256": "da21a927e5da4eb7bae35e056f0eac50d0019258318c9edba43db572feca913e",
+    "version": "7.49.0",
+    "released_at": "2026-09-19T10:22:44+00:00",
+    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.49.0/argus-wordpress-defence-7.49.0.zip",
+    "sha256": "c3cb00846010070100534dad41ca4f856df6e76270ab0534c9e13d880068c314",
     "min_php": "7.4",
     "min_wp": "6.0",
     "critical": false,
-    "summary": "* Improved Form Protection's comment-spam detection to also catch promotional comments that repeat\n  their own submitted website or email domain in the message body, a common pattern automated\n  comment spam wasn't previously being flagged for.",
-    "signature": "+BAzKpYU0GwhtioPJToWp6ONqjpCWfSjz0F0K8wjTGQjLXxB/LblU5RSnRwz+BBhR9PZ+rFq3Cz+FrtpXZUbBg=="
+    "summary": "* A lower-severity WAF detection that keeps being triggered from the same source is now acted on\n  automatically -- it is challenged after a sustained run of repeats, and blocked outright if it\n  keeps going, instead of staying \"allowed\" indefinitely no matter how many times it recurs.\n* Findings now describe this more specifically: repeated matches from the same source will be\n  challenged, then blocked, rather than a generic promise that \"ARGUS will act on it\".",
+    "signature": "Mnk68Wi7lp3s703Qrqe5c7AF7V+V2i79woL/95X/+0qWhGqUkvnkWZIBljU1l5/9ELTG0akkz6tBht1VwlPjAA=="
 }