## Release v2.9.9

> [!CAUTION]
> Versioned docs aliasing FAILED. [View
logs](https://github.com/vercel/turborepo/actions/runs/25342206497)

### Changes

- release(turborepo): 2.9.8 (#12700) (`09900b9`)
- fix: Remove Unix parent death watchdogs (#12699) (`22526bb`)
- release(turborepo): 2.9.9-canary.1 (#12705) (`72cc81c`)
- fix: Scope repo index prefixes to Git root (#12706) (`82dee40`)
- release(turborepo): 2.9.9-canary.2 (#12708) (`7dacd56`)
- ci: Harden non-release GitHub Actions (#12707) (`4af1ef1`)
- docs: Add pnpm workspace flag (-w) to Oxc setup docs (#12655)
(`4e8a20f`)
- fix: Harden OG image signatures (#12709) (`76d26f8`)
- fix: Scope release npm publishing credentials (#12710) (`382f305`)
- ci: Harden release workflows (#12711) (`709c9d4`)
- release(turborepo): 2.9.9-canary.3 (#12712) (`6f35176`)
- fix: Harden docs security endpoints (#12713) (`56eefcc`)
- ci: Harden internal GitHub Actions (#12714) (`cbe31ef`)
- ci: Harden release workflow handling (#12715) (`f89f3bd`)
- fix: Preserve lockfiles during dry-run conversion (#12717) (`3192551`)
- ci: Fix LSP workflow container matrix (#12718) (`ac55ec9`)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Anthony Shew <anthonyshew@gmail.com>

## Release v2.9.10-canary.1

> [!CAUTION]
> Versioned docs aliasing FAILED. [View
logs](https://github.com/vercel/turborepo/actions/runs/25414005119)

### Changes

- fix: Preserve lockfiles during dry-run conversion (#12717) (`3192551`)
- ci: Fix LSP workflow container matrix (#12718) (`ac55ec9`)
- release(turborepo): 2.9.9-canary.4 (#12716) (`25c71b0`)
- release(turborepo): 2.9.9 (#12719) (`acfe475`)
- fix: Respect SCM env vars in `turbo query affected` (#12722)
(`3caa8fb`)
- ci: Package VSCode extension in release workflow (#12723) (`329a545`)
- fix: Avoid raw create-turbo example telemetry (#12725) (`ec0b8dd`)
- fix: Escape graph HTML payloads (#12726) (`89b4f4e`)
- fix: Prevent OTEL token injection to spoofed origins (#12727)
(`1fbc725`)
- fix: Retry HTTP status failures (#12728) (`e389d66`)
- fix: Validate microfrontend proxy Host header (#12730) (`eb46170`)
- fix: Redact task hash env debug logs (#12733) (`6d9fc06`)
- fix: Filter microfrontend proxy environments (#12732) (`9b28a75`)
- fix: Preserve FSEvents mount points for device-relative paths (#12729)
(`6ce73e0`)
- fix: Validate proxy Host headers (#12731) (`9f70395`)
- fix: Resolve TypeScript `.js` extension imports to `.ts` files in
boundaries (#12644) (`b47f6dc`)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>