chore(changelog): v5.35.0 (#12038)

Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com>

ui/CHANGELOG.md

@@ -4,6 +4,26 @@ All notable changes to the **Prowler UI** are documented in this file.
 
 <!-- changelog: release notes start -->
 
+## [1.35.0] (Prowler v5.35.0)
+
+### 🔄 Changed
+
+- AWS Organizations onboarding now deploys the management account role and the member-account StackSet from a single CloudFormation stack, replacing the manual StackSet console step [(#11927)](https://github.com/prowler-cloud/prowler/pull/11927)
+- Dynamic providers can now be renamed and deleted from the Providers table [(#11957)](https://github.com/prowler-cloud/prowler/pull/11957)
+- Sidebar navigation with grouped sections, clearer active states, and a responsive mobile overlay [(#11994)](https://github.com/prowler-cloud/prowler/pull/11994)
+- Core Prowler tools in Lighthouse use the `prowler_*` namespace while preserving legacy `prowler_app_*` compatibility [(#12017)](https://github.com/prowler-cloud/prowler/pull/12017)
+
+### 🐞 Fixed
+
+- The AWS S3 integration CloudFormation quick-create link now sets the bucket owner account ID, preventing a stack validation error when S3 integration is enabled [(#11927)](https://github.com/prowler-cloud/prowler/pull/11927)
+- `Scan ID` filter on the Findings page now shows the active scan when opening findings from a scan's `View Findings` action [(#11997)](https://github.com/prowler-cloud/prowler/pull/11997)
+
+### 🔐 Security
+
+- `js-yaml` to 4.3.0, `@sentry/nextjs` to 10.65.0 with `import-in-the-middle` 3.3.1, and transitive `hono`, `dompurify`, `ws`, `vite`, `@babel/core` and `@opentelemetry/core` to patched versions, resolving 13 npm audit advisories (3 high, 9 moderate, 1 low) plus `hono` CVE-2026-59896, published on NVD but not yet in the npm audit feed [(#12029)](https://github.com/prowler-cloud/prowler/pull/12029)
+
+---
+
 ## [1.34.0] (Prowler v5.34.0)
 
 ### 🚀 Added

ui/changelog.d/aws-org-one-step-stackset-deploy.changed.md

@@ -1 +0,0 @@
-AWS Organizations onboarding now deploys the management account role and the member-account StackSet from a single CloudFormation stack, replacing the manual StackSet console step

ui/changelog.d/dynamic-provider-alias-delete.changed.md

@@ -1 +0,0 @@
-Dynamic providers can now be renamed and deleted from the Providers table

ui/changelog.d/findings-scan-filter-selection.fixed.md

@@ -1 +0,0 @@
-`Scan ID` filter on the Findings page now shows the active scan when opening findings from a scan's `View Findings` action

ui/changelog.d/prowler-tools-namespace.changed.md

@@ -1 +0,0 @@
-Core Prowler tools in Lighthouse use the `prowler_*` namespace while preserving legacy `prowler_app_*` compatibility

ui/changelog.d/s3-integration-bucket-account-id.fixed.md

@@ -1 +0,0 @@
-The AWS S3 integration CloudFormation quick-create link now sets the bucket owner account ID, preventing a stack validation error when S3 integration is enabled

ui/changelog.d/sidebar-redesign.changed.md

@@ -1 +0,0 @@
-Sidebar navigation with grouped sections, clearer active states, and a responsive mobile overlay

ui/changelog.d/ui-dependency-vulnerabilities.security.md

@@ -1 +0,0 @@
-`js-yaml` to 4.3.0, `@sentry/nextjs` to 10.65.0 with `import-in-the-middle` 3.3.1, and transitive `hono`, `dompurify`, `ws`, `vite`, `@babel/core` and `@opentelemetry/core` to patched versions, resolving 13 npm audit advisories (3 high, 9 moderate, 1 low) plus `hono` CVE-2026-59896, published on NVD but not yet in the npm audit feed