chore(deps): bump @modelcontextprotocol/conformance to 0.1.15

Pulls sdk@^1.26.0 (resolves to 1.27.1), clearing the Dependabot alert
for GHSA-345p-7cg4-v4c7 (cross-client data leak, fixed in 1.26.0).

Also removes stale minimumReleaseAgeExclude entries for
hono@4.11.4 and @hono/node-server@1.19.9 (both well past 7 days).

Author: felixweinberger

pnpm-lock.yaml

@@ -57,8 +57,6 @@ linkWorkspacePackages: deep
 minimumReleaseAge: 10080 # 7 days
 minimumReleaseAgeExclude:
     - '@modelcontextprotocol/conformance'
-    - hono@4.11.4 # fixes https://github.com/advisories/GHSA-3vhc-576x-3qv4  https://github.com/advisories/GHSA-f67f-6cw9-8mq4
-    - '@hono/node-server@1.19.9' # https://github.com/honojs/node-server/pull/295
 
 onlyBuiltDependencies:
     - better-sqlite3

pnpm-workspace.yaml

@@ -37,7 +37,7 @@
         "test:conformance:all": "pnpm run test:conformance:client:all && pnpm run test:conformance:server:all"
     },
     "devDependencies": {
-        "@modelcontextprotocol/conformance": "0.1.10",
+        "@modelcontextprotocol/conformance": "0.1.15",
         "@modelcontextprotocol/client": "workspace:^",
         "@modelcontextprotocol/server": "workspace:^",
         "@modelcontextprotocol/core": "workspace:^",