Release v2.0.35: composer audit CI and docs

Author: HecFranco

docs/CHANGELOG.md

@@ -179,6 +179,17 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.0.35] - 2026-08-19
+
+### Security
+
+- **CI:** run `composer audit --locked` after dependency install (REQ-SEC / P3).
+
+### Changed
+
+- **CI:** bump `actions/stale` to v11.
+- **Documentation:** README and roadmap aligned with shipped functionality.
+
 ## [2.0.34] - 2026-07-29
 
 ### Added

docs/UPGRADING.md

@@ -63,6 +63,14 @@ This guide will help you upgrade Composer Update Helper to newer versions.
 
 ## Version-Specific Upgrade Notes
 
+### Upgrading to 2.0.35+ (2026-08-19)
+
+No application upgrade steps.
+
+```bash
+composer update nowo-tech/composer-update-helper
+```
+
 ### Upgrading to 2.0.34+ (2026-07-29)
 
 #### What's Changed