deps(core): update aspire monorepo (#1155)

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [Aspire.Hosting](https://redirect.github.com/microsoft/aspire) |
`13.4.4` → `13.4.5` |
![age](https://developer.mend.io/api/mc/badges/age/nuget/Aspire.Hosting/13.4.5?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/nuget/Aspire.Hosting/13.4.4/13.4.5?slim=true)
|
|
[Aspire.Hosting.Kubernetes](https://redirect.github.com/microsoft/aspire)
| `13.4.4-preview.1.26314.3` → `13.4.5-preview.1.26316.12` |
![age](https://developer.mend.io/api/mc/badges/age/nuget/Aspire.Hosting.Kubernetes/13.4.5-preview.1.26316.12?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/nuget/Aspire.Hosting.Kubernetes/13.4.4-preview.1.26314.3/13.4.5-preview.1.26316.12?slim=true)
|
| [Aspire.Hosting.Testing](https://redirect.github.com/microsoft/aspire)
| `13.4.4` → `13.4.5` |
![age](https://developer.mend.io/api/mc/badges/age/nuget/Aspire.Hosting.Testing/13.4.5?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/nuget/Aspire.Hosting.Testing/13.4.4/13.4.5?slim=true)
|

---

### Release Notes

<details>
<summary>microsoft/aspire (Aspire.Hosting)</summary>

###
[`v13.4.5`](https://redirect.github.com/microsoft/aspire/releases/tag/v13.4.5):
Aspire 13.4.5

##### What's New in Aspire 13.4.5

Patch release for Aspire 13.4 clearing a transitive MessagePack security
advisory, tightening CLI validation for Playwright configuration, and
adding coding-agent detection to CLI telemetry.

##### 🐛 Fixes

- 🛡️ **Bumped StreamJsonRpc to 2.25.29 to clear the MessagePack
GHSA-hv8m-jj95-wg3x (CVE-2026-48109) NU1903 advisory** — The transitive
MessagePack 2.5.192 dependency pulled in via StreamJsonRpc 2.22.23 fell
within the advisory's vulnerable LZ4 decompression range. Aspire does
not use `MessagePackFormatter` or LZ4 — all StreamJsonRpc calls use
`SystemTextJsonFormatter` over local Unix sockets — so the vulnerability
was not reachable in practice. The bump clears the NU1903 warning for
consumers of the `Aspire.Hosting` package.
([#&#8203;18204](https://redirect.github.com/microsoft/aspire/pull/18204),
`@mitchdenny`)
- 🎭 **`playwrightCliVersion` values that are not valid SemVer 2.0 now
fail fast with a clear diagnostic** — Previously an invalid override
(range expression, dist-tag like `latest`, or a `v`-prefixed string)
would surface as a generic npm resolution failure. The value is now
validated with strict SemVer parsing at startup; an error naming the
configuration key and the offending value is emitted immediately.
([#&#8203;18205](https://redirect.github.com/microsoft/aspire/pull/18205),
`@mitchdenny`)
- 🤖 **CLI telemetry now detects and reports the calling coding agent** —
When the Aspire CLI is invoked from inside a known coding agent
environment (GitHub Copilot CLI, VS Code Copilot agent, etc.) the agent
name is included in the main CLI telemetry event. GitHub Copilot CLI is
specifically identified as `copilot-cli`.
([#&#8203;18240](https://redirect.github.com/microsoft/aspire/pull/18240),
`@damianedwards`)

##### 🏷️ Housekeeping

- 📄 Refreshed the `@microsoft/aspire-cli` npm package README to be
TypeScript-only — updated examples to the current `ts-starter` template
(`apphost.mts` / `aspire.mjs`), added a backing-services snippet showing
`aspire add` for PostgreSQL and Redis, and documented `aspire dashboard
run` as a standalone dashboard option.
([#&#8203;18221](https://redirect.github.com/microsoft/aspire/pull/18221),
`@adamint`)

***

*Full Changelog:
[v13.4.4...v13.4.5](https://redirect.github.com/microsoft/aspire/compare/v13.4.4...v13.4.5)*

*Full commit:
[73114e86c64aeb9f3f3c7da8e37df1ae4281b27e](https://redirect.github.com/microsoft/aspire/commit/73114e86c64aeb9f3f3c7da8e37df1ae4281b27e)*

> Generated by [Generate release notes for a new stable Aspire
release](https://redirect.github.com/microsoft/aspire/actions/runs/27667814104/agentic_workflow)
· ● 4.4M

<!-- gh-aw-agentic-workflow: Generate release notes for a new stable
Aspire release, engine: copilot, version: 1.0.40, model:
claude-sonnet-4.6, id: 27667814104, workflow_id: release-notes-generate,
run: https://github.com/microsoft/aspire/actions/runs/27667814104 -->

</details>

---

### Configuration

📅 **Schedule**: (in timezone Europe/Zurich)

- Branch creation
  - "after 9pm,before 6am"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/dotnet/dotnet-operator-sdk).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMTkuMCIsInVwZGF0ZWRJblZlciI6IjQzLjIxOS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

src/KubeOps.Aspire.Hosting/KubeOps.Aspire.Hosting.csproj

@@ -19,8 +19,8 @@
     </PropertyGroup>
 
     <ItemGroup>
-        <PackageReference Include="Aspire.Hosting" Version="13.4.4" />
-        <PackageReference Include="Aspire.Hosting.Kubernetes" Version="13.4.4-preview.1.26314.3" />
+        <PackageReference Include="Aspire.Hosting" Version="13.4.5" />
+        <PackageReference Include="Aspire.Hosting.Kubernetes" Version="13.4.5-preview.1.26316.12" />
         <PackageReference Include="YamlDotNet" Version="18.0.0" />
         <!-- Pin transitive MessagePack (via Aspire.Hosting -> StreamJsonRpc) to a version
              without GHSA-hv8m-jj95-wg3x. Remove once Aspire ships a fixed StreamJsonRpc. -->

test/KubeOps.Aspire.Hosting.Test/KubeOps.Aspire.Hosting.Test.csproj

@@ -6,7 +6,7 @@
     </ItemGroup>
 
     <ItemGroup>
-      <PackageReference Include="Aspire.Hosting.Testing" Version="13.4.4" />
+      <PackageReference Include="Aspire.Hosting.Testing" Version="13.4.5" />
     </ItemGroup>
 
 </Project>