Update signed manifest to 7.49.0

manifest.json

@@ -1,11 +1,11 @@
 {
-    "version": "7.43.0",
-    "released_at": "2026-09-17T12:33:02+00:00",
-    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.43.0/argus-wordpress-defence-7.43.0.zip",
-    "sha256": "cdc118a3fc386a38b376c089bcbb4276a6f6a9cbaa847eb2586320553d4c621d",
+    "version": "7.49.0",
+    "released_at": "2026-09-19T10:22:44+00:00",
+    "package_url": "https://git-cloud.weboria.eu/Weboria/argus-wp-defence/releases/download/v7.49.0/argus-wordpress-defence-7.49.0.zip",
+    "sha256": "c3cb00846010070100534dad41ca4f856df6e76270ab0534c9e13d880068c314",
     "min_php": "7.4",
     "min_wp": "6.0",
     "critical": false,
-    "summary": "* ARGUS's own automatic updates no longer create a flood of integrity findings for the files that\n  update legitimately changed -- each one is now checked against that exact release's own signed\n  file list, so a genuine ARGUS update stays quiet while anything unexpected (a file that update\n  did not actually add, or one it removed but this version still needs) is still caught and\n  reported, not silently ignored.",
-    "signature": "aS+aCokuI9o+k8CkM9NbifEWrOq+iz1wcRFkiWDIR2T9rGF+Xd47TIJDjKoyS3Ll2nx65uBobTCyr3mlK18KAQ=="
+    "summary": "* A lower-severity WAF detection that keeps being triggered from the same source is now acted on\n  automatically -- it is challenged after a sustained run of repeats, and blocked outright if it\n  keeps going, instead of staying \"allowed\" indefinitely no matter how many times it recurs.\n* Findings now describe this more specifically: repeated matches from the same source will be\n  challenged, then blocked, rather than a generic promise that \"ARGUS will act on it\".",
+    "signature": "Mnk68Wi7lp3s703Qrqe5c7AF7V+V2i79woL/95X/+0qWhGqUkvnkWZIBljU1l5/9ELTG0akkz6tBht1VwlPjAA=="
 }