add 1.0.4.0 to the manifest

manifest.json

@@ -8,6 +8,14 @@
         "category": "General",
         "imageUrl": "",
         "versions": [
+            {
+                "version": "1.0.4.0",
+                "changelog": "Guests are now blocked from other plugins' API endpoints on the server, not just hidden from their UI in the browser. A share guest holds a real Jellyfin token, so anything that only hid a button left the endpoint answering it. Jellyfin's own API is untouched: the share tag already limits it to the shared title, and playback needs it. The config page lists your installed plugins with a checkbox each, so you can let one through when it genuinely needs to serve guests, such as an intro skipper. The guest hidden selectors setting is renamed to say what it is: cosmetic, it tidies the view and enforces nothing. Also fixes the dashboard devices page coming up empty after a share expired: deleting a guest left its device row behind, and a device whose user is missing makes Jellyfin fail the whole device listing rather than skip one row.",
+                "targetAbi": "10.11.0.0",
+                "sourceUrl": "https://github.com/Franciskid/jellyfin-plugin-sharelinks/releases/download/v1.0.4.0/sharelinks_1.0.4.0.zip",
+                "checksum": "9aa21e92dc319cfb6dbd95da7b338477",
+                "timestamp": "2026-07-27T19:00:00Z"
+            },
             {
                 "version": "1.0.3.0",
                 "changelog": "Fixes a season share exposing the rest of the series: the tag was going onto the season's parent series, and Jellyfin treats a parent's tags as belonging to all of its children, so every other season became visible to the guest. Tagging now only ever goes downwards. Take this update if you have shared a season with a link that is still live. Also in this release: a link can be made multi-use from the create popup so several people can use it until it expires, with a configurable ceiling on how many watch at once (ten by default), and the dashboard gains a \"Clean up finished links\" button that removes revoked, expired and failed records.",