Update dependency cookie to v2

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
cookie	^0.7.2 → ^2.0.0

---

Release Notes

jshttp/cookie (cookie)

v2.0.1

Compare Source

Improved:

• Small performance improvement by incrementing = index while parsing set-cookie (#​280)

v2.0.0

Compare Source

Important: This release moves the package to ESM only. In node 22+ you can require(esm), and older node versions are not supported.

Changed

• Switch to ESM (#​273)
• Remove deprecated code paths (#​272)
  • The old parse and stringify methods have been renamed: parseCookie and stringifySetCookie
  • stringifySetCookie only supports object mode (e.g. { name: "", value: "" })

Improvements

• Faster stringify cookie (#​262)
• Optimize encode performance (#​269)
• Apply encode to empty cookie values (#​277)

Fixed

• Omit leading semicolon when stringifying cookies with skipped values (#​267)

v1.1.1

Compare Source

Fixed

• Overwrite value in passed in options (#​253) c66147c
  • When value was provided in serialize(key, value, { value }) the value in options was used instead of the value passed as an argument

---

v1.1.0

Compare Source

Added:

• Add stringifyCookie and parseSetCookie methods (#​244, #​214)
• Rename existing methods for clarity (old method names remain for backward compatibility)
  • parse → parseCookie
  • serialize → stringifySetCookie
• Add side effects field (#​245) 00b0327

---

v1.0.2

Compare Source

Fixed

• Loosen cookie name/value validation (#​210)
• fix: options.priority used incorrect fallback (#​207) by @​jonchurch

Added

• Add import example to README (#​190) by @​isnifer

v1.0.1

Compare Source

Added

• Allow case insensitive options (#​194) 3bed080

v1.0.0

Compare Source

Breaking changes

• Use modern JS features, ship TypeScript definition (#​175) 1cc64ff
  • Adds __esModule marker, imports need to use import { parse, serialize } or import * as cookie
• Minimum node.js v18
• Uses null prototype object for parse return value
• Changes strict and priority to match the lower case strings (i.e. low, not LOW or Low)
• Require maxAge to be an integer using Number.isInteger check
• Delegates decode implementation details to decode option (i.e. error handling and quote parsing is defined by decode)
  • Delegate quote parsing to decode (#​180) c4a2597
  • Shift try/catch to decode (#​179) 93a5b97
• Improve arg/option error messages (#​162) e206fd5 @​MaoShizhong

Other

• Remove hasOwnProperty, use undefined check for performance (#​183) 8f3ee9e @​gurgunday

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json

npm warn Unknown env config "store". This will error in a future major version of npm. See `npm help npmrc` for supported config options.
npm error code EALLOWREMOTE
npm error Fetching packages of type "remote" have been disabled
npm error Refusing to fetch "https://registry.npmjs.org/@tailwindcss/oxide-wasm32-wasi/-/oxide-wasm32-wasi-4.3.3.tgz"
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2026-09-30T23_54_58_192Z-debug-0.log