chore(release): prepare v1.1.5

[mohanagy]

Refs #447. Prepares the compatible v1.1.5 patch release.

What reaches installers

Only one thing: @hono/node-server 2.0.10 → 2.1.1, a runtime dependency.

Neither version carries a security advisory, so this is a dependency refresh, not a security release. No runtime behavior and no public API changed.

What does not reach installers

Everything else landed in #446 is development tooling: Vitest 3.2.7 → 5.0.0 with @vitest/coverage-v8 and an explicit vite peer, @types/node 22 → 26, esbuild 0.28.1 → 0.28.2, eslint 10.8.0 → 10.10.0, typescript-eslint 8.65.0 → 8.70.0. The accompanying source edits replaced a fragile Awaited<ReturnType<typeof stat>> idiom with the concrete Stats type; those are type-only and erased at compile time.

That work does clear the two development-only advisories v1.1.4 explicitly did not claim, so both the production-only and full npm audits now report zero — but that is this repository's toolchain, not the published artifact.

Changelog gap closed

#446 merged without an [Unreleased] entry. This PR records it, so the 1.1.5 notes describe both the shipped dependency refresh (#447) and the toolchain work (#446).

Version

package.json and package-lock.json (both version and packages[""].version) move to 1.1.5, no local tag. Pinned version documentation (README.md, docs/presets-and-clients.md, docs/mcp-compatibility.md, docs/whats-new-in-0.5.md) and the release-contract tests are aligned. Changelog dated 2026-09-11, linking the release issue.

Selected from the version actually published to npm (1.1.4); compatible changes only.

Verification

• npm run typecheck, npm run lint, npm run build, npm run check:test-fixture, npm run check:pack ("Package contract verified (58 files)"), and the node dist/cli/main.js schema smoke test are all clean
• Full suite: 1999 passed, 0 failed (162/162 files)
• npm audit: zero, production-only and full

🤖 Generated with Claude Code

[coderabbitai]

Warning

Review limit reached

• Run on-demand review

_{On-demand reviews are free for the next 29 days. After that, they cost $0.25 per reviewed file.}

Or wait 21 minutes for your next included review.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available. Your 108 included PR review attempts over the past 7 days set your current allowance at 1 review per hour.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Team

Run ID: 09579919-d2cb-42b2-932d-064f2845ec04

📥 Commits

Reviewing files that changed from the base of the PR and between 752379d and d8835b2.

⛔ Files ignored due to path filters (1)

• package-lock.json is excluded by !**/package-lock.json

📒 Files selected for processing (7)

• CHANGELOG.md
• README.md
• docs/mcp-compatibility.md
• docs/presets-and-clients.md
• docs/whats-new-in-0.5.md
• package.json
• tests/release-version.test.ts

---

_{Comment @coderabbitai help to get the list of available commands.}