Update signed manifest to 7.49.0

manifest.json

@@ -1,11 +1,11 @@
 {
-    "version": "7.39.9",
+    "version": "7.49.0",
-    "released_at": "2026-09-16T22:55:42+00:00",
+    "released_at": "2026-09-19T10:22:44+00:00",
-    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.39.9/argus-wordpress-defence-7.39.9.zip",
+    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.49.0/argus-wordpress-defence-7.49.0.zip",
-    "sha256": "71bd5210209f88690b9e6f1c907b5003d3ad2d71b16725a063953d73a68cd654",
+    "sha256": "c3cb00846010070100534dad41ca4f856df6e76270ab0534c9e13d880068c314",
     "min_php": "7.4",
     "min_wp": "6.0",
     "critical": false,
-    "summary": "* Security hardening: disconnecting this site from WAD (or uninstalling the plugin) now also\n  invalidates its connection secret on WAD's side, not just locally -- previously the secret stayed\n  valid indefinitely. This site also now detects if a WAD account disconnects it remotely and shows\n  a clear notice instead of retrying silently.",
+    "summary": "* A lower-severity WAF detection that keeps being triggered from the same source is now acted on\n  automatically -- it is challenged after a sustained run of repeats, and blocked outright if it\n  keeps going, instead of staying \"allowed\" indefinitely no matter how many times it recurs.\n* Findings now describe this more specifically: repeated matches from the same source will be\n  challenged, then blocked, rather than a generic promise that \"ARGUS will act on it\".",
-    "signature": "wmURSl7ERPhNLEAamavc92ln0Dx4gZVJoTjDLQQKoEkqr6Q3UU4p2zblyaACiUOf3DLK6DlJDMi6PScZISJ7Dw=="
+    "signature": "Mnk68Wi7lp3s703Qrqe5c7AF7V+V2i79woL/95X/+0qWhGqUkvnkWZIBljU1l5/9ELTG0akkz6tBht1VwlPjAA=="
 }