v2.9.9-canary.3

<!-- Release notes generated using configuration in .github/release.yml at v2.9.9-canary.3 -->

What's Changed

Changelog

• release(turborepo): 2.9.9-canary.2 by @github-actions[bot] in https://github.com/vercel/turborepo/pull/12708
• ci: Harden non-release GitHub Actions by @anthonyshew in https://github.com/vercel/turborepo/pull/12707
• docs: Add pnpm workspace flag (-w) to Oxc setup docs by @mattjoll in https://github.com/vercel/turborepo/pull/12655
• fix: Harden OG image signatures by @anthonyshew in https://github.com/vercel/turborepo/pull/12709
• fix: Scope release npm publishing credentials by @anthonyshew in https://github.com/vercel/turborepo/pull/12710
• ci: Harden release workflows by @anthonyshew in https://github.com/vercel/turborepo/pull/12711

New Contributors

• @mattjoll made their first contribution in https://github.com/vercel/turborepo/pull/12655

Full Changelog: https://github.com/vercel/turborepo/compare/v2.9.9-canary.2...v2.9.9-canary.3