fix: add -UseBasicParsing to Invoke-WebRequest in get-aspire-cli.ps1

[Copilot]

Windows PowerShell 5.1 defaults to the IE parsing engine for Invoke-WebRequest, triggering a "Security Warning: Script Execution Risk" prompt in interactive sessions. PowerShell 7+ already defaults to basic parsing, so this only affects legacy powershell.exe users.

get-aspire-cli-pr.ps1 was also reviewed and confirmed to require no changes — it uses the gh CLI for all artifact downloads and contains no Invoke-WebRequest calls.

Changes

• eng/scripts/get-aspire-cli.ps1: Added UseBasicParsing = $true to the $requestParams hashtable passed to Invoke-WebRequest, bypassing the IE engine on PS 5.1. This parameter is a no-op on PS 7+.

Fixes #15608

Checklist

• Is this feature complete?
  • Yes. Ready to ship.
  • No. Follow-up changes expected.
• Are you including unit tests for the changes and scenario tests if relevant?
  • Yes
  • No
• Did you add public API?
  • Yes
    • If yes, did you have an API Review for it?
      • Yes
      • No
    • Did you add <remarks /> and <code /> elements on your triple slash comments?
      • Yes
      • No
  • No
• Does the change make any security assumptions or guarantees?
  • Yes
    • If yes, have you done a threat model and had a security review?
      • Yes
      • No
  • No
• Does the change require an update in our Aspire docs?
  • Yes
    • Link to aspire.dev issue:
      • New issue
  • No

---

💬 Send tasks to Copilot coding agent from Slack and Teams to turn conversations into code. Copilot posts an update in your thread when it's finished.

[github-actions]

🚀 Dogfood this PR with:

⚠️ WARNING: Do not do this without first carefully reviewing the code of this PR to satisfy yourself it is safe.

curl -fsSL https://raw.githubusercontent.com/microsoft/aspire/main/eng/scripts/get-aspire-cli-pr.sh | bash -s -- 15609

Or

• Run remotely in PowerShell:

iex "& { $(irm https://raw.githubusercontent.com/microsoft/aspire/main/eng/scripts/get-aspire-cli-pr.ps1) } 15609"

[radical]

@copilot make sure get-aspire-cli-pr.ps1 also has the fix if needed.

[Copilot]

Pull request overview

Updates the Aspire CLI download script to avoid Invoke-WebRequest’s legacy IE-based parsing behavior on Windows PowerShell 5.1, preventing interactive security prompts while keeping behavior unchanged on newer PowerShell editions.

Changes:

• Add UseBasicParsing = $true to the Invoke-WebRequest splat parameters in Invoke-SecureWebRequest.

[Copilot]

@copilot make sure get-aspire-cli-pr.ps1 also has the fix if needed.

get-aspire-cli-pr.ps1 doesn't call Invoke-WebRequest at all — it relies on the gh CLI for all artifact downloads — so no fix is needed there.