turbo 2.9.10-canary.1 on Node.js NPM

What's Changed

fix: Preserve lockfiles during dry-run conversion by @anthonyshew in #12717
ci: Fix LSP workflow container matrix by @anthonyshew in #12718
release(turborepo): 2.9.9-canary.4 by @github-actions[bot] in #12716
release(turborepo): 2.9.9 by @github-actions[bot] in #12719
fix: Respect SCM env vars in turbo query affected by @anthonyshew in #12722
ci: Package VSCode extension in release workflow by @anthonyshew in #12723
fix: Avoid some raw create-turbo example telemetry by @anthonyshew in #12725
fix: Escape graph HTML payloads by @anthonyshew in #12726
fix: Prevent OTEL token injection to spoofed origins by @anthonyshew in #12727
fix: Retry HTTP status failures by @anthonyshew in #12728
fix: Validate microfrontend proxy Host header by @anthonyshew in #12730
fix: Redact task hash env debug logs by @anthonyshew in #12733
fix: Filter microfrontend proxy environments by @anthonyshew in #12732
fix: Preserve FSEvents mount points for device-relative paths by @anthonyshew in #12729
fix: Validate proxy Host headers by @anthonyshew in #12731
fix: Resolve TypeScript .js extension imports to .ts files in boundaries by @maschwenk in #12644

Full Changelog: v2.9.9-canary.4...v2.9.10-canary.1