Aspire 13.6.2
MessagePack security patch
Aspire 13.6.2 released with MessagePack pinned for security fixes
Microsoft has released Aspire 13.6.2, a patch on the 13.6 line. The main change pins the MessagePack dependency to 2.5.307 to pick up security fixes. Because the release is maintenance-focused, it is a low-effort upgrade for Aspire developers, but the dependency pin is worth checking in your own projects.