…to 13.5.3 (#251)

Updated
[Aspire.Npgsql.EntityFrameworkCore.PostgreSQL](https://github.com/microsoft/aspire)
from 13.5.2 to 13.5.3.

<details>
<summary>Release notes</summary>

_Sourced from [Aspire.Npgsql.EntityFrameworkCore.PostgreSQL's
releases](https://github.com/microsoft/aspire/releases)._

## 13.5.3

## What's New in Aspire 13.5.3

Patch release for Aspire 13.5 that fixes Dashboard Graph view crashes
for resources with multi-path icons and restores missing public URLs for
DevTunnel resources.

### 🐛 Fixes

- 📊 **Dashboard Graph view could crash for Azure Blob resources** —
Resources such as those created with `AddBlobs` use icons containing
multiple SVG paths, which caused an XML parsing exception and broke the
dashboard circuit. The graph now combines multi-path icons correctly.
Regression introduced in 13.5. Fixes
[#​19489](microsoft/aspire#19489).
([#​19585](microsoft/aspire#19585), backport of
[#​19579](microsoft/aspire#19579),
`@​sebastienros`)

- 🌐 **DevTunnel public URLs were missing from the Dashboard and MCP
snapshots** — DevTunnel port resources could report `Running` and
`Healthy` while showing no public URLs. Proxyless port allocation is now
limited to compute and container resources, allowing DevTunnels to
publish their actual public endpoints. Regression introduced in 13.5.
Fixes [#​19496](microsoft/aspire#19496).
([#​19625](microsoft/aspire#19625), backport of
[#​19590](microsoft/aspire#19590),
`@​karolz-ms`, `@​danegsta`)

### 🏷️ Housekeeping

- 🚀 Bumped branding to 13.5.3

---

*Full Changelog:
[v13.5.2...v13.5.3](microsoft/aspire@v13.5.2...v13.5.3)*

*Full commit:
[b5f143315ffb6968ea939a9978797a5b20e4c688](microsoft/aspire@b5f143315ffb6968ea939a9978797a5b20e4c688)*

Commits viewable in [compare
view](microsoft/aspire@v13.5.2...v13.5.3).
</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Updated [Aspire.Hosting.JavaScript](https://github.com/microsoft/aspire)
from 13.4.3 to 13.5.3.

<details>
<summary>Release notes</summary>

_Sourced from [Aspire.Hosting.JavaScript's
releases](https://github.com/microsoft/aspire/releases)._

## 13.5.3

## What's New in Aspire 13.5.3

Patch release for Aspire 13.5 that fixes Dashboard Graph view crashes
for resources with multi-path icons and restores missing public URLs for
DevTunnel resources.

### 🐛 Fixes

- 📊 **Dashboard Graph view could crash for Azure Blob resources** —
Resources such as those created with `AddBlobs` use icons containing
multiple SVG paths, which caused an XML parsing exception and broke the
dashboard circuit. The graph now combines multi-path icons correctly.
Regression introduced in 13.5. Fixes
[#​19489](https://github.com/microsoft/aspire/issues/19489).
([#​19585](https://github.com/microsoft/aspire/pull/19585), backport of
[#​19579](https://github.com/microsoft/aspire/pull/19579),
`@​sebastienros`)

- 🌐 **DevTunnel public URLs were missing from the Dashboard and MCP
snapshots** — DevTunnel port resources could report `Running` and
`Healthy` while showing no public URLs. Proxyless port allocation is now
limited to compute and container resources, allowing DevTunnels to
publish their actual public endpoints. Regression introduced in 13.5.
Fixes [#​19496](https://github.com/microsoft/aspire/issues/19496).
([#​19625](https://github.com/microsoft/aspire/pull/19625), backport of
[#​19590](https://github.com/microsoft/aspire/pull/19590),
`@​karolz-ms`, `@​danegsta`)

### 🏷️ Housekeeping

- 🚀 Bumped branding to 13.5.3

---

*Full Changelog:
[v13.5.2...v13.5.3](https://github.com/microsoft/aspire/compare/v13.5.2...v13.5.3)*

*Full commit:
[b5f143315ffb6968ea939a9978797a5b20e4c688](https://github.com/microsoft/aspire/commit/b5f143315ffb6968ea939a9978797a5b20e4c688)*

## 13.5.2

## What's New in Aspire 13.5.2


Patch release for Aspire 13.5 that removes an unused native helper
binary from the Windows CLI archives so 13.5 servicing releases stay
publishable to WinGet.


### 🐛 Fixes



- 🪟 **Windows CLI archives shipped an unused ~4.9 MB `hex1bpty.exe`** —
The Windows CLI archives (`aspire-cli-win-{x64,arm64}-*.zip`) bundled
Hex1b's out-of-process PTY host, which Aspire never executes (DCP owns
every pseudo-terminal Aspire surfaces). Besides the wasted download, the
extra unexplained executable stalled the WinGet publish, since every
binary in the archive goes through executable and malware validation. A
build-only MSBuild target now drops the file from the CLI publish
output; Unix native assets are unaffected. Regression new in 13.5.
([[#​19557](https://github.com/microsoft/aspire/pull/19557)](https://github.com/microsoft/aspire/pull/19557),
backport of #​19554, `@​mitchdenny`)



### 🏷️ Housekeeping



- 🚀 Bumped branding to 13.5.2




*Full Changelog:
[[v13.5.1...v13.5.2](https://github.com/microsoft/aspire/compare/v13.5.1...v13.5.2)](https://github.com/microsoft/aspire/compare/v13.5.1...v13.5.2)*


*Full commit:
[[a22cec24d76e764b3681977e314ab4a0aeed0240](https://github.com/microsoft/aspire/commit/a22cec24d76e764b3681977e314ab4a0aeed0240)](https://github.com/microsoft/aspire/commit/a22cec24d76e764b3681977e314ab4a0aeed0240)*


## 13.5.1

## What's New in Aspire 13.5.1


Patch release for Aspire 13.5 fixing a TypeScript/Java polyglot AppHost
compatibility regression when running the 13.5 SDK under an older
(13.4.x) CLI, plus a DCP update and release-pipeline housekeeping.

### 🐛 Fixes


- 🍎 **Polyglot AppHosts could crash on startup on macOS** — On macOS,
polyglot (TypeScript/Python/Java/Go/Rust) AppHosts could crash during
startup due to an interaction between how DCP's Go runtime forks
detached processes and how .NET Native AOT installs its signal handlers.
Updated DCP (Developer Control Plane) to 0.25.13 to resolve the crash.
([[#​19528](https://github.com/microsoft/aspire/pull/19528)](https://github.com/microsoft/aspire/pull/19528))

- 🔗 **Polyglot AppHosts on the 13.5 SDK crashed under an older CLI with
`MissingMethodException`** — A TypeScript or Java AppHost built with the
13.5 SDK failed to start when launched by an older (13.4.x) CLI, because
the newer codegen called `Aspire.TypeSystem` members that don't exist in
the CLI's older contract. Code generation now probes for these additive
capabilities before using them, so older CLIs skip only the unsupported
feature and startup succeeds. Regression introduced in 13.5 by #​19365.
Fixes #​19503.
([[#​19524](https://github.com/microsoft/aspire/pull/19524)](https://github.com/microsoft/aspire/pull/19524),
backport of #​19506, `@​adamint`)


### 🏷️ Housekeeping



- 📦 Updated DCP (Developer Control Plane) to 0.25.13
([[#​19528](https://github.com/microsoft/aspire/pull/19528)](https://github.com/microsoft/aspire/pull/19528))

- 🔧 Restored WinGet publication using .NET 9 `wingetcreate`
([[#​19509](https://github.com/microsoft/aspire/pull/19509)](https://github.com/microsoft/aspire/pull/19509))

- 🧹 Removed the pipeline-scoped `Publish-Build-Assets` group from the
release pipeline
([[#​19523](https://github.com/microsoft/aspire/pull/19523)](https://github.com/microsoft/aspire/pull/19523),
[[#​19163](https://github.com/microsoft/aspire/pull/19163)](https://github.com/microsoft/aspire/pull/19163))

- 🚀 Bumped branding to 13.5.1
([[#​19531](https://github.com/microsoft/aspire/pull/19531)](https://github.com/microsoft/aspire/pull/19531))




*Full Changelog:
[[v13.5.0...v13.5.1](https://github.com/microsoft/aspire/compare/v13.5.0...v13.5.1)](https://github.com/microsoft/aspire/compare/v13.5.0...v13.5.1)*


*Full commit:
[[69db530a4816698cf1d5fa4557933e0ac4f127c6](https://github.com/microsoft/aspire/commit/69db530a4816698cf1d5fa4557933e0ac4f127c6)](https://github.com/microsoft/aspire/commit/69db530a4816698cf1d5fa4557933e0ac4f127c6)*

## 13.5.0

# Aspire 13.5.0

Aspire 13.5 is a developer-experience release focused on a richer, more
interactive AppHost, closer C# and TypeScript parity, sharper tooling,
more flexible deployment modeling, and a broad set of runtime-stability
improvements.

## Highlights

- 💬 **Richer AppHost interactions** — The Interaction Service now works
across C# and TypeScript AppHosts with stable prompts and dynamic
inputs, file uploads, progress dialogs, notifications, and user-defined
resource command arguments that surface as dashboard controls and CLI
options.
- 🖥️ **Interactive terminal sessions** — The experimental
`WithTerminal()` API lets resources host REPLs, shells, TUIs, and other
interactive programs directly in the dashboard, with an opt-in `aspire
terminal` CLI command for attaching from your shell.
- 🌐 **TypeScript AppHost is generally available** — Polyglot AppHosts no
longer require the `ASPIREATS001` experimental diagnostic and gain
custom health checks, container file copying, HTTPS developer
certificates, faster startup, and several reliability fixes that further
close the gap with C#.
- 🛠️ **CLI installation and reliability** — The Aspire CLI is available
through npm and Nix alongside Homebrew, WinGet, mise, and NuGet. New C#
AppHosts enable the CLI bundle by default, while `aspire stop --force`,
`aspire update --migrate`, `aspire doctor`, docs search, signal
handling, and stale-socket cleanup all improve day-to-day workflows.
- 🎨 **Refreshed dashboard** — The dashboard adopts official Aspire
branding and a new accessible design-token system, with timestamp and
exact numeric telemetry filters, console-log text search, clearer
reconnect and health-check experiences, and correct telemetry streaming
while filters are active.
- 💻 **Rebranded VS Code extension** — The extension is now named
**Aspire** and adds an in-editor dashboard, Bun and MAUI debugging,
resource commands in the tree view, discovered AppHosts, improved
parameter handling, and more efficient workspace discovery.
- ☸️ **More expressive deployments** — Kubernetes and AKS gain
first-class persistent volumes, Azure Container Apps adds deterministic
unique resource naming, Azure environments support delegated subnets,
and Docker Compose can publish Blazor gateways and configure shared
memory.
- ☁️ **Expanded hosting integrations** — Azure resources can be
referenced across resource groups, subscriptions, and tenants; the new
`Aspire.Hosting.Dotnet` package models .NET projects by path; Radius
deployment arrives in preview; and Foundry Local, Redis modules, dev
tunnels, Go debugging, and other integrations gain new capabilities.

## ⚠️ Breaking changes

Notable changes include hosting context `ServiceProvider` properties
being renamed to `Services`, `PublishAsConnectionString` becoming
obsolete in favor of `AddConnectionString`, removal of `aspire ps
--resources` and `--include-hidden` in favor of `aspire describe`,
earlier proxyless endpoint port allocation, deprecation of the GitHub
Models integration, removal of the dashboard AI Assistant, and opt-in
rather than automatic dashboard launch from the VS Code extension.

See the full list and migration guidance in the [Aspire 13.5 breaking
changes](https://aspire.dev/whats-new/aspire-13-5/#breaking-changes).

## 📖 Learn more

For complete details, examples, migration guidance, and everything new
in this release, read [What's new in Aspire
13.5](https://aspire.dev/whats-new/aspire-13-5/).

Thank you to all the community contributors who helped make Aspire 13.5
possible! 💜

---

_Full Changelog:
[v13.4.6...v13.5.0](https://github.com/microsoft/aspire/compare/v13.4.6...v13.5.0)_

_Full commit:
[e076d8e427cb3afb528dbd605acd74c3aea69f94](https://github.com/microsoft/aspire/commit/e076d8e427cb3afb528dbd605acd74c3aea69f94)_

## 13.4.6

## What's New in Aspire 13.4.6

Patch release for Aspire 13.4 fixing polyglot AppHost code generation
binding when CLI and SDK versions diverge, resource service port
collision in `--isolated` mode, and a MongoDB.Driver dependency update.

### 🐛 Fixes

- 🔗 **Polyglot AppHost code generation silently failed when CLI and SDK
versions diverged** — `Aspire.TypeSystem` used a floating strong-name
`AssemblyVersion` that changed with every build. When the installed
Aspire CLI was built at a different version than the AppHost's SDK, the
CLR couldn't satisfy the strong-name bind and every code generator
(TypeScript, Python, Java, Go, Rust) was silently dropped, surfacing as
`No code generator found for language: <lang>`. The `AssemblyVersion` is
now frozen at a stable constant so any compatible CLI/SDK pair on 13.4
binds successfully. Relates to #​18110 and #​17910.
([#​18160](https://github.com/microsoft/aspire/pull/18160),
`@​sebastienros`)

- 🔌 **Multiple AppHosts started with `--isolated` collided on the
resource service port** — Both instances tried to bind to the same fixed
port from `ASPIRE_RESOURCE_SERVICE_ENDPOINT_URL`, causing an "address
already in use" error on the second instance. `DashboardServiceHost` now
binds to port 0 on loopback when `RandomizePorts` is true (set by
`--isolated`), letting the OS assign a unique port per instance.
([#​18341](https://github.com/microsoft/aspire/pull/18341), `@​JamesNK`)

- 🍃 **MongoDB.Driver updated to 3.9.0** — Removes a wrongly pinned
`SharpCompress` transitive dependency and uses the corrected `Snappier`
transitive. Fixes #​17981.
([#​18279](https://github.com/microsoft/aspire/pull/18279),
`@​Falco20019`)

### 🏷️ Housekeeping

- 🚀 Bumped branding to 13.4.6
([#​18343](https://github.com/microsoft/aspire/pull/18343))

---

_Full Changelog:
[v13.4.5...v13.4.6](https://github.com/microsoft/aspire/compare/v13.4.5...v13.4.6)_

_Full commit:
[87fe259e4fc244c599019a7b1304c85a1488f248](https://github.com/microsoft/aspire/commit/87fe259e4fc244c599019a7b1304c85a1488f248)_

> Generated by [Generate release notes for a new stable Aspire
release](https://github.com/microsoft/aspire/actions/runs/27855270514) ·
131 AIC · ⌖ 13.5 AIC · ⊞ 37.4K

<!-- gh-aw-agentic-workflow: Generate release notes for a new stable
Aspire release, engine: copilot, version: 1.0.60, model:
claude-sonnet-4.6, id: 27855270514, workflow_id: release-notes-generate,
run: https://github.com/microsoft/aspire/actions/runs/27855270514 -->

## 13.4.5

## What's New in Aspire 13.4.5

Patch release for Aspire 13.4 clearing a transitive MessagePack security
advisory, tightening CLI validation for Playwright configuration, and
adding coding-agent detection to CLI telemetry.

### 🐛 Fixes

- 🛡️ **Bumped StreamJsonRpc to 2.25.29 to clear the MessagePack
GHSA-hv8m-jj95-wg3x (CVE-2026-48109) NU1903 advisory** — The transitive
MessagePack 2.5.192 dependency pulled in via StreamJsonRpc 2.22.23 fell
within the advisory's vulnerable LZ4 decompression range. Aspire does
not use `MessagePackFormatter` or LZ4 — all StreamJsonRpc calls use
`SystemTextJsonFormatter` over local Unix sockets — so the vulnerability
was not reachable in practice. The bump clears the NU1903 warning for
consumers of the `Aspire.Hosting` package.
([#​18204](https://github.com/microsoft/aspire/pull/18204),
`@​mitchdenny`)
- 🎭 **`playwrightCliVersion` values that are not valid SemVer 2.0 now
fail fast with a clear diagnostic** — Previously an invalid override
(range expression, dist-tag like `latest`, or a `v`-prefixed string)
would surface as a generic npm resolution failure. The value is now
validated with strict SemVer parsing at startup; an error naming the
configuration key and the offending value is emitted immediately.
([#​18205](https://github.com/microsoft/aspire/pull/18205),
`@​mitchdenny`)
- 🤖 **CLI telemetry now detects and reports the calling coding agent** —
When the Aspire CLI is invoked from inside a known coding agent
environment (GitHub Copilot CLI, VS Code Copilot agent, etc.) the agent
name is included in the main CLI telemetry event. GitHub Copilot CLI is
specifically identified as `copilot-cli`.
([#​18240](https://github.com/microsoft/aspire/pull/18240),
`@​damianedwards`)

### 🏷️ Housekeeping

- 📄 Refreshed the `@​microsoft/aspire-cli` npm package README to be
TypeScript-only — updated examples to the current `ts-starter` template
(`apphost.mts` / `aspire.mjs`), added a backing-services snippet showing
`aspire add` for PostgreSQL and Redis, and documented `aspire dashboard
run` as a standalone dashboard option.
([#​18221](https://github.com/microsoft/aspire/pull/18221), `@​adamint`)

---

_Full Changelog:
[v13.4.4...v13.4.5](https://github.com/microsoft/aspire/compare/v13.4.4...v13.4.5)_

_Full commit:
[73114e86c64aeb9f3f3c7da8e37df1ae4281b27e](https://github.com/microsoft/aspire/commit/73114e86c64aeb9f3f3c7da8e37df1ae4281b27e)_

> Generated by [Generate release notes for a new stable Aspire
release](https://github.com/microsoft/aspire/actions/runs/27667814104/agentic_workflow)
· ● 4.4M

<!-- gh-aw-agentic-workflow: Generate release notes for a new stable
Aspire release, engine: copilot, version: 1.0.40, model:
claude-sonnet-4.6, id: 27667814104, workflow_id: release-notes-generate,
run: https://github.com/microsoft/aspire/actions/runs/27667814104 -->

## 13.4.4

## What's New in Aspire 13.4.4

Patch release for Aspire 13.4 with improved DCP connection reliability
during request execution and consistent `ExcludeFromMcp()` filtering
across all CLI MCP tools.

### 🐛 Fixes

* 🔌 **DCP requests could fail permanently when the connection dropped
mid-request** — If the underlying DCP channel closed while a request was
in flight, the error was surfaced directly instead of being retried.
Reconnection is now attempted as part of the DCP request retry path so
transient disconnections recover automatically without surfacing errors.
([#​18096](https://github.com/microsoft/aspire/pull/18096),
`@​karolz-ms`)
* 🔍 **Resources marked with `ExcludeFromMcp()` were not consistently
filtered from CLI MCP tools** — Resources with the
`resource.excludeFromMcp` property were not excluded uniformly from all
CLI MCP tool results. `list_resources`, `list_console_logs`,
`execute_resource_command`, `list_structured_logs`, `list_traces`, and
`list_trace_structured_logs` all now honor the exclusion, preventing
excluded resources and their telemetry from appearing in agent context.
([#​18150](https://github.com/microsoft/aspire/pull/18150), `@​JamesNK`)

### 🏷️ Housekeeping

* 📦 Improved npm CLI package metadata and hardened npm publish
validation in the release pipeline.
([#​18093](https://github.com/microsoft/aspire/pull/18093),
`@​adamratzman`)

* * *

_Full Changelog:
[v13.4.3...v13.4.4](https://github.com/microsoft/aspire/compare/v13.4.3...v13.4.4)_

_Full commit:
[ccc566c5ab3285c9beb8f38ede34734bb477c029](https://github.com/microsoft/aspire/commit/ccc566c5ab3285c9beb8f38ede34734bb477c029)_


Commits viewable in [compare
view](https://github.com/microsoft/aspire/compare/v13.4.3...v13.5.3).
</details>

Updated [Aspire.Hosting.Redis](https://github.com/microsoft/aspire) from
13.4.3 to 13.5.3.

<details>
<summary>Release notes</summary>

_Sourced from [Aspire.Hosting.Redis's
releases](https://github.com/microsoft/aspire/releases)._

## 13.5.3

## What's New in Aspire 13.5.3

Patch release for Aspire 13.5 that fixes Dashboard Graph view crashes
for resources with multi-path icons and restores missing public URLs for
DevTunnel resources.

### 🐛 Fixes

- 📊 **Dashboard Graph view could crash for Azure Blob resources** —
Resources such as those created with `AddBlobs` use icons containing
multiple SVG paths, which caused an XML parsing exception and broke the
dashboard circuit. The graph now combines multi-path icons correctly.
Regression introduced in 13.5. Fixes
[#​19489](https://github.com/microsoft/aspire/issues/19489).
([#​19585](https://github.com/microsoft/aspire/pull/19585), backport of
[#​19579](https://github.com/microsoft/aspire/pull/19579),
`@​sebastienros`)

- 🌐 **DevTunnel public URLs were missing from the Dashboard and MCP
snapshots** — DevTunnel port resources could report `Running` and
`Healthy` while showing no public URLs. Proxyless port allocation is now
limited to compute and container resources, allowing DevTunnels to
publish their actual public endpoints. Regression introduced in 13.5.
Fixes [#​19496](https://github.com/microsoft/aspire/issues/19496).
([#​19625](https://github.com/microsoft/aspire/pull/19625), backport of
[#​19590](https://github.com/microsoft/aspire/pull/19590),
`@​karolz-ms`, `@​danegsta`)

### 🏷️ Housekeeping

- 🚀 Bumped branding to 13.5.3

---

*Full Changelog:
[v13.5.2...v13.5.3](https://github.com/microsoft/aspire/compare/v13.5.2...v13.5.3)*

*Full commit:
[b5f143315ffb6968ea939a9978797a5b20e4c688](https://github.com/microsoft/aspire/commit/b5f143315ffb6968ea939a9978797a5b20e4c688)*

## 13.5.2

## What's New in Aspire 13.5.2


Patch release for Aspire 13.5 that removes an unused native helper
binary from the Windows CLI archives so 13.5 servicing releases stay
publishable to WinGet.


### 🐛 Fixes



- 🪟 **Windows CLI archives shipped an unused ~4.9 MB `hex1bpty.exe`** —
The Windows CLI archives (`aspire-cli-win-{x64,arm64}-*.zip`) bundled
Hex1b's out-of-process PTY host, which Aspire never executes (DCP owns
every pseudo-terminal Aspire surfaces). Besides the wasted download, the
extra unexplained executable stalled the WinGet publish, since every
binary in the archive goes through executable and malware validation. A
build-only MSBuild target now drops the file from the CLI publish
output; Unix native assets are unaffected. Regression new in 13.5.
([[#​19557](https://github.com/microsoft/aspire/pull/19557)](https://github.com/microsoft/aspire/pull/19557),
backport of #​19554, `@​mitchdenny`)



### 🏷️ Housekeeping



- 🚀 Bumped branding to 13.5.2




*Full Changelog:
[[v13.5.1...v13.5.2](https://github.com/microsoft/aspire/compare/v13.5.1...v13.5.2)](https://github.com/microsoft/aspire/compare/v13.5.1...v13.5.2)*


*Full commit:
[[a22cec24d76e764b3681977e314ab4a0aeed0240](https://github.com/microsoft/aspire/commit/a22cec24d76e764b3681977e314ab4a0aeed0240)](https://github.com/microsoft/aspire/commit/a22cec24d76e764b3681977e314ab4a0aeed0240)*


## 13.5.1

## What's New in Aspire 13.5.1


Patch release for Aspire 13.5 fixing a TypeScript/Java polyglot AppHost
compatibility regression when running the 13.5 SDK under an older
(13.4.x) CLI, plus a DCP update and release-pipeline housekeeping.

### 🐛 Fixes


- 🍎 **Polyglot AppHosts could crash on startup on macOS** — On macOS,
polyglot (TypeScript/Python/Java/Go/Rust) AppHosts could crash during
startup due to an interaction between how DCP's Go runtime forks
detached processes and how .NET Native AOT installs its signal handlers.
Updated DCP (Developer Control Plane) to 0.25.13 to resolve the crash.
([[#​19528](https://github.com/microsoft/aspire/pull/19528)](https://github.com/microsoft/aspire/pull/19528))

- 🔗 **Polyglot AppHosts on the 13.5 SDK crashed under an older CLI with
`MissingMethodException`** — A TypeScript or Java AppHost built with the
13.5 SDK failed to start when launched by an older (13.4.x) CLI, because
the newer codegen called `Aspire.TypeSystem` members that don't exist in
the CLI's older contract. Code generation now probes for these additive
capabilities before using them, so older CLIs skip only the unsupported
feature and startup succeeds. Regression introduced in 13.5 by #​19365.
Fixes #​19503.
([[#​19524](https://github.com/microsoft/aspire/pull/19524)](https://github.com/microsoft/aspire/pull/19524),
backport of #​19506, `@​adamint`)


### 🏷️ Housekeeping



- 📦 Updated DCP (Developer Control Plane) to 0.25.13
([[#​19528](https://github.com/microsoft/aspire/pull/19528)](https://github.com/microsoft/aspire/pull/19528))

- 🔧 Restored WinGet publication using .NET 9 `wingetcreate`
([[#​19509](https://github.com/microsoft/aspire/pull/19509)](https://github.com/microsoft/aspire/pull/19509))

- 🧹 Removed the pipeline-scoped `Publish-Build-Assets` group from the
release pipeline
([[#​19523](https://github.com/microsoft/aspire/pull/19523)](https://github.com/microsoft/aspire/pull/19523),
[[#​19163](https://github.com/microsoft/aspire/pull/19163)](https://github.com/microsoft/aspire/pull/19163))

- 🚀 Bumped branding to 13.5.1
([[#​19531](https://github.com/microsoft/aspire/pull/19531)](https://github.com/microsoft/aspire/pull/19531))




*Full Changelog:
[[v13.5.0...v13.5.1](https://github.com/microsoft/aspire/compare/v13.5.0...v13.5.1)](https://github.com/microsoft/aspire/compare/v13.5.0...v13.5.1)*


*Full commit:
[[69db530a4816698cf1d5fa4557933e0ac4f127c6](https://github.com/microsoft/aspire/commit/69db530a4816698cf1d5fa4557933e0ac4f127c6)](https://github.com/microsoft/aspire/commit/69db530a4816698cf1d5fa4557933e0ac4f127c6)*

## 13.5.0

# Aspire 13.5.0

Aspire 13.5 is a developer-experience release focused on a richer, more
interactive AppHost, closer C# and TypeScript parity, sharper tooling,
more flexible deployment modeling, and a broad set of runtime-stability
improvements.

## Highlights

- 💬 **Richer AppHost interactions** — The Interaction Service now works
across C# and TypeScript AppHosts with stable prompts and dynamic
inputs, file uploads, progress dialogs, notifications, and user-defined
resource command arguments that surface as dashboard controls and CLI
options.
- 🖥️ **Interactive terminal sessions** — The experimental
`WithTerminal()` API lets resources host REPLs, shells, TUIs, and other
interactive programs directly in the dashboard, with an opt-in `aspire
terminal` CLI command for attaching from your shell.
- 🌐 **TypeScript AppHost is generally available** — Polyglot AppHosts no
longer require the `ASPIREATS001` experimental diagnostic and gain
custom health checks, container file copying, HTTPS developer
certificates, faster startup, and several reliability fixes that further
close the gap with C#.
- 🛠️ **CLI installation and reliability** — The Aspire CLI is available
through npm and Nix alongside Homebrew, WinGet, mise, and NuGet. New C#
AppHosts enable the CLI bundle by default, while `aspire stop --force`,
`aspire update --migrate`, `aspire doctor`, docs search, signal
handling, and stale-socket cleanup all improve day-to-day workflows.
- 🎨 **Refreshed dashboard** — The dashboard adopts official Aspire
branding and a new accessible design-token system, with timestamp and
exact numeric telemetry filters, console-log text search, clearer
reconnect and health-check experiences, and correct telemetry streaming
while filters are active.
- 💻 **Rebranded VS Code extension** — The extension is now named
**Aspire** and adds an in-editor dashboard, Bun and MAUI debugging,
resource commands in the tree view, discovered AppHosts, improved
parameter handling, and more efficient workspace discovery.
- ☸️ **More expressive deployments** — Kubernetes and AKS gain
first-class persistent volumes, Azure Container Apps adds deterministic
unique resource naming, Azure environments support delegated subnets,
and Docker Compose can publish Blazor gateways and configure shared
memory.
- ☁️ **Expanded hosting integrations** — Azure resources can be
referenced across resource groups, subscriptions, and tenants; the new
`Aspire.Hosting.Dotnet` package models .NET projects by path; Radius
deployment arrives in preview; and Foundry Local, Redis modules, dev
tunnels, Go debugging, and other integrations gain new capabilities.

## ⚠️ Breaking changes

Notable changes include hosting context `ServiceProvider` properties
being renamed to `Services`, `PublishAsConnectionString` becoming
obsolete in favor of `AddConnectionString`, removal of `aspire ps
--resources` and `--include-hidden` in favor of `aspire describe`,
earlier proxyless endpoint port allocation, deprecation of the GitHub
Models integration, removal of the dashboard AI Assistant, and opt-in
rather than automatic dashboard launch from the VS Code extension.

See the full list and migration guidance in the [Aspire 13.5 breaking
changes](https://aspire.dev/whats-new/aspire-13-5/#breaking-changes).

## 📖 Learn more

For complete details, examples, migration guidance, and everything new
in this release, read [What's new in Aspire
13.5](https://aspire.dev/whats-new/aspire-13-5/).

Thank you to all the community contributors who helped make Aspire 13.5
possible! 💜

---

_Full Changelog:
[v13.4.6...v13.5.0](https://github.com/microsoft/aspire/compare/v13.4.6...v13.5.0)_

_Full commit:
[e076d8e427cb3afb528dbd605acd74c3aea69f94](https://github.com/microsoft/aspire/commit/e076d8e427cb3afb528dbd605acd74c3aea69f94)_

## 13.4.6

## What's New in Aspire 13.4.6

Patch release for Aspire 13.4 fixing polyglot AppHost code generation
binding when CLI and SDK versions diverge, resource service port
collision in `--isolated` mode, and a MongoDB.Driver dependency update.

### 🐛 Fixes

- 🔗 **Polyglot AppHost code generation silently failed when CLI and SDK
versions diverged** — `Aspire.TypeSystem` used a floating strong-name
`AssemblyVersion` that changed with every build. When the installed
Aspire CLI was built at a different version than the AppHost's SDK, the
CLR couldn't satisfy the strong-name bind and every code generator
(TypeScript, Python, Java, Go, Rust) was silently dropped, surfacing as
`No code generator found for language: <lang>`. The `AssemblyVersion` is
now frozen at a stable constant so any compatible CLI/SDK pair on 13.4
binds successfully. Relates to #​18110 and #​17910.
([#​18160](https://github.com/microsoft/aspire/pull/18160),
`@​sebastienros`)

- 🔌 **Multiple AppHosts started with `--isolated` collided on the
resource service port** — Both instances tried to bind to the same fixed
port from `ASPIRE_RESOURCE_SERVICE_ENDPOINT_URL`, causing an "address
already in use" error on the second instance. `DashboardServiceHost` now
binds to port 0 on loopback when `RandomizePorts` is true (set by
`--isolated`), letting the OS assign a unique port per instance.
([#​18341](https://github.com/microsoft/aspire/pull/18341), `@​JamesNK`)

- 🍃 **MongoDB.Driver updated to 3.9.0** — Removes a wrongly pinned
`SharpCompress` transitive dependency and uses the corrected `Snappier`
transitive. Fixes #​17981.
([#​18279](https://github.com/microsoft/aspire/pull/18279),
`@​Falco20019`)

### 🏷️ Housekeeping

- 🚀 Bumped branding to 13.4.6
([#​18343](https://github.com/microsoft/aspire/pull/18343))

---

_Full Changelog:
[v13.4.5...v13.4.6](https://github.com/microsoft/aspire/compare/v13.4.5...v13.4.6)_

_Full commit:
[87fe259e4fc244c599019a7b1304c85a1488f248](https://github.com/microsoft/aspire/commit/87fe259e4fc244c599019a7b1304c85a1488f248)_

> Generated by [Generate release notes for a new stable Aspire
release](https://github.com/microsoft/aspire/actions/runs/27855270514) ·
131 AIC · ⌖ 13.5 AIC · ⊞ 37.4K

<!-- gh-aw-agentic-workflow: Generate release notes for a new stable
Aspire release, engine: copilot, version: 1.0.60, model:
claude-sonnet-4.6, id: 27855270514, workflow_id: release-notes-generate,
run: https://github.com/microsoft/aspire/actions/runs/27855270514 -->

## 13.4.5

## What's New in Aspire 13.4.5

Patch release for Aspire 13.4 clearing a transitive MessagePack security
advisory, tightening CLI validation for Playwright configuration, and
adding coding-agent detection to CLI telemetry.

### 🐛 Fixes

- 🛡️ **Bumped StreamJsonRpc to 2.25.29 to clear the MessagePack
GHSA-hv8m-jj95-wg3x (CVE-2026-48109) NU1903 advisory** — The transitive
MessagePack 2.5.192 dependency pulled in via StreamJsonRpc 2.22.23 fell
within the advisory's vulnerable LZ4 decompression range. Aspire does
not use `MessagePackFormatter` or LZ4 — all StreamJsonRpc calls use
`SystemTextJsonFormatter` over local Unix sockets — so the vulnerability
was not reachable in practice. The bump clears the NU1903 warning for
consumers of the `Aspire.Hosting` package.
([#​18204](https://github.com/microsoft/aspire/pull/18204),
`@​mitchdenny`)
- 🎭 **`playwrightCliVersion` values that are not valid SemVer 2.0 now
fail fast with a clear diagnostic** — Previously an invalid override
(range expression, dist-tag like `latest`, or a `v`-prefixed string)
would surface as a generic npm resolution failure. The value is now
validated with strict SemVer parsing at startup; an error naming the
configuration key and the offending value is emitted immediately.
([#​18205](https://github.com/microsoft/aspire/pull/18205),
`@​mitchdenny`)
- 🤖 **CLI telemetry now detects and reports the calling coding agent** —
When the Aspire CLI is invoked from inside a known coding agent
environment (GitHub Copilot CLI, VS Code Copilot agent, etc.) the agent
name is included in the main CLI telemetry event. GitHub Copilot CLI is
specifically identified as `copilot-cli`.
([#​18240](https://github.com/microsoft/aspire/pull/18240),
`@​damianedwards`)

### 🏷️ Housekeeping

- 📄 Refreshed the `@​microsoft/aspire-cli` npm package README to be
TypeScript-only — updated examples to the current `ts-starter` template
(`apphost.mts` / `aspire.mjs`), added a backing-services snippet showing
`aspire add` for PostgreSQL and Redis, and documented `aspire dashboard
run` as a standalone dashboard option.
([#​18221](https://github.com/microsoft/aspire/pull/18221), `@​adamint`)

---

_Full Changelog:
[v13.4.4...v13.4.5](https://github.com/microsoft/aspire/compare/v13.4.4...v13.4.5)_

_Full commit:
[73114e86c64aeb9f3f3c7da8e37df1ae4281b27e](https://github.com/microsoft/aspire/commit/73114e86c64aeb9f3f3c7da8e37df1ae4281b27e)_

> Generated by [Generate release notes for a new stable Aspire
release](https://github.com/microsoft/aspire/actions/runs/27667814104/agentic_workflow)
· ● 4.4M

<!-- gh-aw-agentic-workflow: Generate release notes for a new stable
Aspire release, engine: copilot, version: 1.0.40, model:
claude-sonnet-4.6, id: 27667814104, workflow_id: release-notes-generate,
run: https://github.com/microsoft/aspire/actions/runs/27667814104 -->

## 13.4.4

## What's New in Aspire 13.4.4

Patch release for Aspire 13.4 with improved DCP connection reliability
during request execution and consistent `ExcludeFromMcp()` filtering
across all CLI MCP tools.

### 🐛 Fixes

* 🔌 **DCP requests could fail permanently when the connection dropped
mid-request** — If the underlying DCP channel closed while a request was
in flight, the error was surfaced directly instead of being retried.
Reconnection is now attempted as part of the DCP request retry path so
transient disconnections recover automatically without surfacing errors.
([#​18096](https://github.com/microsoft/aspire/pull/18096),
`@​karolz-ms`)
* 🔍 **Resources marked with `ExcludeFromMcp()` were not consistently
filtered from CLI MCP tools** — Resources with the
`resource.excludeFromMcp` property were not excluded uniformly from all
CLI MCP tool results. `list_resources`, `list_console_logs`,
`execute_resource_command`, `list_structured_logs`, `list_traces`, and
`list_trace_structured_logs` all now honor the exclusion, preventing
excluded resources and their telemetry from appearing in agent context.
([#​18150](https://github.com/microsoft/aspire/pull/18150), `@​JamesNK`)

### 🏷️ Housekeeping

* 📦 Improved npm CLI package metadata and hardened npm publish
validation in the release pipeline.
([#​18093](https://github.com/microsoft/aspire/pull/18093),
`@​adamratzman`)

* * *

_Full Changelog:
[v13.4.3...v13.4.4](https://github.com/microsoft/aspire/compare/v13.4.3...v13.4.4)_

_Full commit:
[ccc566c5ab3285c9beb8f38ede34734bb477c029](https://github.com/microsoft/aspire/commit/ccc566c5ab3285c9beb8f38ede34734bb477c029)_


Commits viewable in [compare
view](https://github.com/microsoft/aspire/compare/v13.4.3...v13.5.3).
</details>

Updated
[Aspire.StackExchange.Redis.DistributedCaching](https://github.com/microsoft/aspire)
from 13.4.3 to 13.5.3.

<details>
<summary>Release notes</summary>

_Sourced from [Aspire.StackExchange.Redis.DistributedCaching's
releases](https://github.com/microsoft/aspire/releases)._

## 13.5.3

## What's New in Aspire 13.5.3

Patch release for Aspire 13.5 that fixes Dashboard Graph view crashes
for resources with multi-path icons and restores missing public URLs for
DevTunnel resources.

### 🐛 Fixes

- 📊 **Dashboard Graph view could crash for Azure Blob resources** —
Resources such as those created with `AddBlobs` use icons containing
multiple SVG paths, which caused an XML parsing exception and broke the
dashboard circuit. The graph now combines multi-path icons correctly.
Regression introduced in 13.5. Fixes
[#​19489](https://github.com/microsoft/aspire/issues/19489).
([#​19585](https://github.com/microsoft/aspire/pull/19585), backport of
[#​19579](https://github.com/microsoft/aspire/pull/19579),
`@​sebastienros`)

- 🌐 **DevTunnel public URLs were missing from the Dashboard and MCP
snapshots** — DevTunnel port resources could report `Running` and
`Healthy` while showing no public URLs. Proxyless port allocation is now
limited to compute and container resources, allowing DevTunnels to
publish their actual public endpoints. Regression introduced in 13.5.
Fixes [#​19496](https://github.com/microsoft/aspire/issues/19496).
([#​19625](https://github.com/microsoft/aspire/pull/19625), backport of
[#​19590](https://github.com/microsoft/aspire/pull/19590),
`@​karolz-ms`, `@​danegsta`)

### 🏷️ Housekeeping

- 🚀 Bumped branding to 13.5.3

---

*Full Changelog:
[v13.5.2...v13.5.3](https://github.com/microsoft/aspire/compare/v13.5.2...v13.5.3)*

*Full commit:
[b5f143315ffb6968ea939a9978797a5b20e4c688](https://github.com/microsoft/aspire/commit/b5f143315ffb6968ea939a9978797a5b20e4c688)*

## 13.5.2

## What's New in Aspire 13.5.2


Patch release for Aspire 13.5 that removes an unused native helper
binary from the Windows CLI archives so 13.5 servicing releases stay
publishable to WinGet.


### 🐛 Fixes



- 🪟 **Windows CLI archives shipped an unused ~4.9 MB `hex1bpty.exe`** —
The Windows CLI archives (`aspire-cli-win-{x64,arm64}-*.zip`) bundled
Hex1b's out-of-process PTY host, which Aspire never executes (DCP owns
every pseudo-terminal Aspire surfaces). Besides the wasted download, the
extra unexplained executable stalled the WinGet publish, since every
binary in the archive goes through executable and malware validation. A
build-only MSBuild target now drops the file from the CLI publish
output; Unix native assets are unaffected. Regression new in 13.5.
([[#​19557](https://github.com/microsoft/aspire/pull/19557)](https://github.com/microsoft/aspire/pull/19557),
backport of #​19554, `@​mitchdenny`)



### 🏷️ Housekeeping



- 🚀 Bumped branding to 13.5.2




*Full Changelog:
[[v13.5.1...v13.5.2](https://github.com/microsoft/aspire/compare/v13.5.1...v13.5.2)](https://github.com/microsoft/aspire/compare/v13.5.1...v13.5.2)*


*Full commit:
[[a22cec24d76e764b3681977e314ab4a0aeed0240](https://github.com/microsoft/aspire/commit/a22cec24d76e764b3681977e314ab4a0aeed0240)](https://github.com/microsoft/aspire/commit/a22cec24d76e764b3681977e314ab4a0aeed0240)*


## 13.5.1

## What's New in Aspire 13.5.1


Patch release for Aspire 13.5 fixing a TypeScript/Java polyglot AppHost
compatibility regression when running the 13.5 SDK under an older
(13.4.x) CLI, plus a DCP update and release-pipeline housekeeping.

### 🐛 Fixes


- 🍎 **Polyglot AppHosts could crash on startup on macOS** — On macOS,
polyglot (TypeScript/Python/Java/Go/Rust) AppHosts could crash during
startup due to an interaction between how DCP's Go runtime forks
detached processes and how .NET Native AOT installs its signal handlers.
Updated DCP (Developer Control Plane) to 0.25.13 to resolve the crash.
([[#​19528](https://github.com/microsoft/aspire/pull/19528)](https://github.com/microsoft/aspire/pull/19528))

- 🔗 **Polyglot AppHosts on the 13.5 SDK crashed under an older CLI with
`MissingMethodException`** — A TypeScript or Java AppHost built with the
13.5 SDK failed to start when launched by an older (13.4.x) CLI, because
the newer codegen called `Aspire.TypeSystem` members that don't exist in
the CLI's older contract. Code generation now probes for these additive
capabilities before using them, so older CLIs skip only the unsupported
feature and startup succeeds. Regression introduced in 13.5 by #​19365.
Fixes #​19503.
([[#​19524](https://github.com/microsoft/aspire/pull/19524)](https://github.com/microsoft/aspire/pull/19524),
backport of #​19506, `@​adamint`)


### 🏷️ Housekeeping



- 📦 Updated DCP (Developer Control Plane) to 0.25.13
([[#​19528](https://github.com/microsoft/aspire/pull/19528)](https://github.com/microsoft/aspire/pull/19528))

- 🔧 Restored WinGet publication using .NET 9 `wingetcreate`
([[#​19509](https://github.com/microsoft/aspire/pull/19509)](https://github.com/microsoft/aspire/pull/19509))

- 🧹 Removed the pipeline-scoped `Publish-Build-Assets` group from the
release pipeline
([[#​19523](https://github.com/microsoft/aspire/pull/19523)](https://github.com/microsoft/aspire/pull/19523),
[[#​19163](https://github.com/microsoft/aspire/pull/19163)](https://github.com/microsoft/aspire/pull/19163))

- 🚀 Bumped branding to 13.5.1
([[#​19531](https://github.com/microsoft/aspire/pull/19531)](https://github.com/microsoft/aspire/pull/19531))




*Full Changelog:
[[v13.5.0...v13.5.1](https://github.com/microsoft/aspire/compare/v13.5.0...v13.5.1)](https://github.com/microsoft/aspire/compare/v13.5.0...v13.5.1)*


*Full commit:
[[69db530a4816698cf1d5fa4557933e0ac4f127c6](https://github.com/microsoft/aspire/commit/69db530a4816698cf1d5fa4557933e0ac4f127c6)](https://github.com/microsoft/aspire/commit/69db530a4816698cf1d5fa4557933e0ac4f127c6)*

## 13.5.0

# Aspire 13.5.0

Aspire 13.5 is a developer-experience release focused on a richer, more
interactive AppHost, closer C# and TypeScript parity, sharper tooling,
more flexible deployment modeling, and a broad set of runtime-stability
improvements.

## Highlights

- 💬 **Richer AppHost interactions** — The Interaction Service now works
across C# and TypeScript AppHosts with stable prompts and dynamic
inputs, file uploads, progress dialogs, notifications, and user-defined
resource command arguments that surface as dashboard controls and CLI
options.
- 🖥️ **Interactive terminal sessions** — The experimental
`WithTerminal()` API lets resources host REPLs, shells, TUIs, and other
interactive programs directly in the dashboard, with an opt-in `aspire
terminal` CLI command for attaching from your shell.
- 🌐 **TypeScript AppHost is generally available** — Polyglot AppHosts no
longer require the `ASPIREATS001` experimental diagnostic and gain
custom health checks, container file copying, HTTPS developer
certificates, faster startup, and several reliability fixes that further
close the gap with C#.
- 🛠️ **CLI installation and reliability** — The Aspire CLI is available
through npm and Nix alongside Homebrew, WinGet, mise, and NuGet. New C#
AppHosts enable the CLI bundle by default, while `aspire stop --force`,
`aspire update --migrate`, `aspire doctor`, docs search, signal
handling, and stale-socket cleanup all improve day-to-day workflows.
- 🎨 **Refreshed dashboard** — The dashboard adopts official Aspire
branding and a new accessible design-token system, with timestamp and
exact numeric telemetry filters, console-log text search, clearer
reconnect and health-check experiences, and correct telemetry streaming
while filters are active.
- 💻 **Rebranded VS Code extension** — The extension is now named
**Aspire** and adds an in-editor dashboard, Bun and MAUI debugging,
resource commands in the tree view, discovered AppHosts, improved
parameter handling, and more efficient workspace discovery.
- ☸️ **More expressive deployments** — Kubernetes and AKS gain
first-class persistent volumes, Azure Container Apps adds deterministic
unique resource naming, Azure environments support delegated subnets,
and Docker Compose can publish Blazor gateways and configure shared
memory.
- ☁️ **Expanded hosting integrations** — Azure resources can be
referenced across resource groups, subscriptions, and tenants; the new
`Aspire.Hosting.Dotnet` package models .NET projects by path; Radius
deployment arrives in preview; and Foundry Local, Redis modules, dev
tunnels, Go debugging, and other integrations gain new capabilities.

## ⚠️ Breaking changes

Notable changes include hosting context `ServiceProvider` properties
being renamed to `Services`, `PublishAsConnectionString` becoming
obsolete in favor of `AddConnectionString`, removal of `aspire ps
--resources` and `--include-hidden` in favor of `aspire describe`,
earlier proxyless endpoint port allocation, deprecation of the GitHub
Models integration, removal of the dashboard AI Assistant, and opt-in
rather than automatic dashboard launch from the VS Code extension.

See the full list and migration guidance in the [Aspire 13.5 breaking
changes](https://aspire.dev/whats-new/aspire-13-5/#breaking-changes).

## 📖 Learn more

For complete details, examples, migration guidance, and everything new
in this release, read [What's new in Aspire
13.5](https://aspire.dev/whats-new/aspire-13-5/).

Thank you to all the community contributors who helped make Aspire 13.5
possible! 💜

---

_Full Changelog:
[v13.4.6...v13.5.0](https://github.com/microsoft/aspire/compare/v13.4.6...v13.5.0)_

_Full commit:
[e076d8e427cb3afb528dbd605acd74c3aea69f94](https://github.com/microsoft/aspire/commit/e076d8e427cb3afb528dbd605acd74c3aea69f94)_

## 13.4.6

## What's New in Aspire 13.4.6

Patch release for Aspire 13.4 fixing polyglot AppHost code generation
binding when CLI and SDK versions diverge, resource service port
collision in `--isolated` mode, and a MongoDB.Driver dependency update.

### 🐛 Fixes

- 🔗 **Polyglot AppHost code generation silently failed when CLI and SDK
versions diverged** — `Aspire.TypeSystem` used a floating strong-name
`AssemblyVersion` that changed with every build. When the installed
Aspire CLI was built at a different version than the AppHost's SDK, the
CLR couldn't satisfy the strong-name bind and every code generator
(TypeScript, Python, Java, Go, Rust) was silently dropped, surfacing as
`No code generator found for language: <lang>`. The `AssemblyVersion` is
now frozen at a stable constant so any compatible CLI/SDK pair on 13.4
binds successfully. Relates to #​18110 and #​17910.
([#​18160](https://github.com/microsoft/aspire/pull/18160),
`@​sebastienros`)

- 🔌 **Multiple AppHosts started with `--isolated` collided on the
resource service port** — Both instances tried to bind to the same fixed
port from `ASPIRE_RESOURCE_SERVICE_ENDPOINT_URL`, causing an "address
already in use" error on the second instance. `DashboardServiceHost` now
binds to port 0 on loopback when `RandomizePorts` is true (set by
`--isolated`), letting the OS assign a unique port per instance.
([#​18341](https://github.com/microsoft/aspire/pull/18341), `@​JamesNK`)

- 🍃 **MongoDB.Driver updated to 3.9.0** — Removes a wrongly pinned
`SharpCompress` transitive dependency and uses the corrected `Snappier`
transitive. Fixes #​17981.
([#​18279](https://github.com/microsoft/aspire/pull/18279),
`@​Falco20019`)

### 🏷️ Housekeeping

- 🚀 Bumped branding to 13.4.6
([#​18343](https://github.com/microsoft/aspire/pull/18343))

---

_Full Changelog:
[v13.4.5...v13.4.6](https://github.com/microsoft/aspire/compare/v13.4.5...v13.4.6)_

_Full commit:
[87fe259e4fc244c599019a7b1304c85a1488f248](https://github.com/microsoft/aspire/commit/87fe259e4fc244c599019a7b1304c85a1488f248)_

> Generated by [Generate release notes for a new stable Aspire
release](https://github.com/microsoft/aspire/actions/runs/27855270514) ·
131 AIC · ⌖ 13.5 AIC · ⊞ 37.4K

<!-- gh-aw-agentic-workflow: Generate release notes for a new stable
Aspire release, engine: copilot, version: 1.0.60, model:
claude-sonnet-4.6, id: 27855270514, workflow_id: release-notes-generate,
run: https://github.com/microsoft/aspire/actions/runs/27855270514 -->

## 13.4.5

## What's New in Aspire 13.4.5

Patch release for Aspire 13.4 clearing a transitive MessagePack security
advisory, tightening CLI validation for Playwright configuration, and
adding coding-agent detection to CLI telemetry.

### 🐛 Fixes

- 🛡️ **Bumped StreamJsonRpc to 2.25.29 to clear the MessagePack
GHSA-hv8m-jj95-wg3x (CVE-2026-48109) NU1903 advisory** — The transitive
MessagePack 2.5.192 dependency pulled in via StreamJsonRpc 2.22.23 fell
within the advisory's vulnerable LZ4 decompression range. Aspire does
not use `MessagePackFormatter` or LZ4 — all StreamJsonRpc calls use
`SystemTextJsonFormatter` over local Unix sockets — so the vulnerability
was not reachable in practice. The bump clears the NU1903 warning for
consumers of the `Aspire.Hosting` package.
([#​18204](https://github.com/microsoft/aspire/pull/18204),
`@​mitchdenny`)
- 🎭 **`playwrightCliVersion` values that are not valid SemVer 2.0 now
fail fast with a clear diagnostic** — Previously an invalid override
(range expression, dist-tag like `latest`, or a `v`-prefixed string)
would surface as a generic npm resolution failure. The value is now
validated with strict SemVer parsing at startup; an error naming the
configuration key and the offending value is emitted immediately.
([#​18205](https://github.com/microsoft/aspire/pull/18205),
`@​mitchdenny`)
- 🤖 **CLI telemetry now detects and reports the calling coding agent** —
When the Aspire CLI is invoked from inside a known coding agent
environment (GitHub Copilot CLI, VS Code Copilot agent, etc.) the agent
name is included in the main CLI telemetry event. GitHub Copilot CLI is
specifically identified as `copilot-cli`.
([#​18240](https://github.com/microsoft/aspire/pull/18240),
`@​damianedwards`)

### 🏷️ Housekeeping

- 📄 Refreshed the `@​microsoft/aspire-cli` npm package README to be
TypeScript-only — updated examples to the current `ts-starter` template
(`apphost.mts` / `aspire.mjs`), added a backing-services snippet showing
`aspire add` for PostgreSQL and Redis, and documented `aspire dashboard
run` as a standalone dashboard option.
([#​18221](https://github.com/microsoft/aspire/pull/18221), `@​adamint`)

---

_Full Changelog:
[v13.4.4...v13.4.5](https://github.com/microsoft/aspire/compare/v13.4.4...v13.4.5)_

_Full commit:
[73114e86c64aeb9f3f3c7da8e37df1ae4281b27e](https://github.com/microsoft/aspire/commit/73114e86c64aeb9f3f3c7da8e37df1ae4281b27e)_

> Generated by [Generate release notes for a new stable Aspire
release](https://github.com/microsoft/aspire/actions/runs/27667814104/agentic_workflow)
· ● 4.4M

<!-- gh-aw-agentic-workflow: Generate release notes for a new stable
Aspire release, engine: copilot, version: 1.0.40, model:
claude-sonnet-4.6, id: 27667814104, workflow_id: release-notes-generate,
run: https://github.com/microsoft/aspire/actions/runs/27667814104 -->

## 13.4.4

## What's New in Aspire 13.4.4

Patch release for Aspire 13.4 with improved DCP connection reliability
during request execution and consistent `ExcludeFromMcp()` filtering
across all CLI MCP tools.

### 🐛 Fixes

* 🔌 **DCP requests could fail permanently when the connection dropped
mid-request** — If the underlying DCP channel closed while a request was
in flight, the error was surfaced directly instead of being retried.
Reconnection is now attempted as part of the DCP request retry path so
transient disconnections recover automatically without surfacing errors.
([#​18096](https://github.com/microsoft/aspire/pull/18096),
`@​karolz-ms`)
* 🔍 **Resources marked with `ExcludeFromMcp()` were not consistently
filtered from CLI MCP tools** — Resources with the
`resource.excludeFromMcp` property were not excluded uniformly from all
CLI MCP tool results. `list_resources`, `list_console_logs`,
`execute_resource_command`, `list_structured_logs`, `list_traces`, and
`list_trace_structured_logs` all now honor the exclusion, preventing
excluded resources and their telemetry from appearing in agent context.
([#​18150](https://github.com/microsoft/aspire/pull/18150), `@​JamesNK`)

### 🏷️ Housekeeping

* 📦 Improved npm CLI package metadata and hardened npm publish
validation in the release pipeline.
([#​18093](https://github.com/microsoft/aspire/pull/18093),
`@​adamratzman`)

* * *

_Full Changelog:
[v13.4.3...v13.4.4](https://github.com/microsoft/aspire/compare/v13.4.3...v13.4.4)_

_Full commit:
[ccc566c5ab3285c9beb8f38ede34734bb477c029](https://github.com/microsoft/aspire/commit/ccc566c5ab3285c9beb8f38ede34734bb477c029)_


Commits viewable in [compare
view](https://github.com/microsoft/aspire/compare/v13.4.3...v13.5.3).
</details>

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>