chore(main): release 0.2.35

[github-actions]

🤖 I have created a release beep boop

0.2.35 (2026-04-11)

Bug Fixes

• clean up oversized zip entry temps (#911) (66b4871)
• flag Paddle code patterns as warnings (#925) (32fa0b7)
• harden manifest parse boundaries (#922) (6f5b516)
• harden standalone pickle scanner (#901) (31f7dd3)
• mark corrupt NumPy object payloads inconclusive (#912) (ecba19d)
• mark incomplete MXNet scans inconclusive (#923) (a928ed7)
• mark incomplete sharded scans inconclusive (#909) (510d0fb)
• mark malformed GGUF scans inconclusive (#914) (9b3e216)
• mark malformed Keras H5 configs inconclusive (#917) (23671c3)
• mark malformed Keras ZIP configs inconclusive (#918) (d4ad8d8)
• mark malformed SafeTensors scans inconclusive (#913) (43913d6)
• mark malformed tflite scans inconclusive (#916) (07c871a)
• mark partial archive scans inconclusive (#907) (c8eb918)
• mark partial streaming scans inconclusive (#908) (3d47a10)
• mark unknown ONNX tensor dtypes inconclusive (#915) (35661b6)
• preserve picklescan stack state (#910) (fabac5c)
• recover malformed Jinja template configs (#920) (d619c8f)
• route corrupt catboost scans fail closed (#924) (052bb5f)
• traverse nemo yaml list configs (#919) (0d8d4fd)
• zip: fail closed on MAR handler parse errors (#896) (a06a620)

Documentation

• add repo correctness audit ledger (#921) (06be0b6)

---

This PR was generated with Release Please. See documentation.

[mldangelo-oai]

Approved release-please 0.2.35 PR after reviewing the version bump, changelog, pyproject, and uv.lock sync.

[github-actions]

🤖 Created releases:

• v0.2.35

🌻