chore: remove dependency on `set-cookie-parser` by Copilot · Pull Request #15384 · sveltejs/kit

Copilot · 2026-02-22T04:36:04Z

Drops the set-cookie-parser dependency (and its @types/* package) by using parseSetCookie from the already-bundled cookie@1.x package and the standard Headers.prototype.getSetCookie() API (Node.js ≥ 18).

Key changes

server/fetch.js: Replace splitCookiesString + parseString with response.headers.getSetCookie() (returns individual Set-Cookie headers as an array) + parseSetCookie(str, { decode: (v) => v })
exports/node/index.js: Replace splitCookiesString(response.headers.get('set-cookie')) workaround with response.headers.getSetCookie() directly
exports/vite/index.js: Remove set-cookie-parser from SSR externals list
package.json / pnpm-workspace.yaml: Remove set-cookie-parser and @types/set-cookie-parser

// Before
for (const str of set_cookie_parser.splitCookiesString(response.headers.get('set-cookie'))) {
    const { name, value, ...options } = set_cookie_parser.parseString(str, { decodeValues: false });
    // ...
}

// After
for (const str of response.headers.getSetCookie()) {
    const { name, value, ...options } = parseSetCookie(str, { decode: (v) => v });
    // ...
}

Original prompt

This section details on the original issue you should resolve

<issue_title>Various cookie upgrades and package removals</issue_title>
<issue_description>### Describe the problem

Upgrade to cookie 1.x
Allows dropping types package
Next release will allow dropping set-cookie-parser (jshttp/cookie#244)

Describe the proposed solution

Update to latest cookie package

Alternatives considered

No response

Importance

nice to have

Additional Information

No response</issue_description>

<agent_instructions>use parseSetCookie from the cookie package to replace the set-cookie-parser package</agent_instructions>

Comments on the Issue (you are @copilot in this section)
@Conduitry We don't want to work on this until we're ready to start making the push to SvelteKit 3.0 as it's going to be a breaking change. @benmccann We tried to upgrade cookie earlier, but had to roll it back due to breaking changes. SvelteKit 3 will happen soon and will upgrade to the latest @benmccann @copilot use `parseSetCookie` from the `cookie` package to replace the `set-cookie-parser` package in the `version-3` branch

Fixes Various cookie upgrades and package removals #14553

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

changeset-bot · 2026-02-22T04:36:08Z

🦋 Changeset detected

Latest commit: 43761b0

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
@sveltejs/kit	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

svelte-docs-bot · 2026-02-22T04:36:39Z

Preview: https://svelte-dev-git-preview-kit-15384-svelte.vercel.app/

Co-authored-by: benmccann <322311+benmccann@users.noreply.github.com>

This PR was opened by the [Changesets release](https://github.com/changesets/action) GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to version-3, this PR will be updated. ⚠️

⚠️

⚠️ `version-3` is currently in **pre mode** so this branch has prereleases rather than normal releases. If you want to exit prereleases, run `changeset pre exit` on `version-3`. ⚠️

⚠️

⚠️ # Releases ## @sveltejs/adapter-auto@8.0.0-next.0 ### Major Changes - breaking: require SvelteKit 3 ([#15506](#15506)) ### Patch Changes - Updated dependencies [[`fa335bd`](fa335bd), [`3031d89`](3031d89), [`cb9d416`](cb9d416), [`caf3a18`](caf3a18), [`4777827`](4777827), [`a2792e2`](a2792e2), [`ba36148`](ba36148), [`48e8710`](48e8710), [`e2f3075`](e2f3075), [`047d6a0`](047d6a0), [`87603d1`](87603d1), [`096962c`](096962c), [`d545970`](d545970), [`e2f3075`](e2f3075), [`d06affc`](d06affc), [`8af47eb`](8af47eb), [`e2f3075`](e2f3075), [`5c4d130`](5c4d130), [`3f11f35`](3f11f35), [`caf3a18`](caf3a18), [`8823037`](8823037), [`1d76212`](1d76212), [`0dc0548`](0dc0548), [`00d81fa`](00d81fa)]: - @sveltejs/kit@3.0.0-next.0 ## @sveltejs/adapter-cloudflare@8.0.0-next.0 ### Major Changes - breaking: upgrade `@cloudflare/workers-types` to 4.20260219.0 ([#15347](#15347)) - breaking: upgrade minimum `wrangler` version to ^4.67.0 ([#15347](#15347)) - breaking: remove `platform.context` in favour of `platform.ctx` ([#15347](#15347)) - breaking: require SvelteKit 3 ([#15506](#15506)) ### Patch Changes - chore: check the `WORKERS_CI` environment variable to determine if we're building for Cloudflare Workers ([#13733](#13733)) - Updated dependencies [[`fa335bd`](fa335bd), [`3031d89`](3031d89), [`cb9d416`](cb9d416), [`caf3a18`](caf3a18), [`4777827`](4777827), [`a2792e2`](a2792e2), [`ba36148`](ba36148), [`48e8710`](48e8710), [`e2f3075`](e2f3075), [`047d6a0`](047d6a0), [`87603d1`](87603d1), [`096962c`](096962c), [`d545970`](d545970), [`e2f3075`](e2f3075), [`d06affc`](d06affc), [`8af47eb`](8af47eb), [`e2f3075`](e2f3075), [`5c4d130`](5c4d130), [`3f11f35`](3f11f35), [`caf3a18`](caf3a18), [`8823037`](8823037), [`1d76212`](1d76212), [`0dc0548`](0dc0548), [`00d81fa`](00d81fa)]: - @sveltejs/kit@3.0.0-next.0 ## @sveltejs/adapter-netlify@7.0.0-next.0 ### Major Changes - chore: use `rolldown` for edge function bundling ([#15432](#15432)) - breaking: write output that conforms to the stable [Netlify Frameworks API](https://docs.netlify.com/build/frameworks/frameworks-api/). ([#15294](#15294)) Deploying and previewing with Netlify CLI now requires [v17.31.0](https://github.com/netlify/cli/releases/tag/v17.31.0) or later. Run `npm i -g netlify-cli@latest` to upgrade. - breaking: require SvelteKit 3 ([#15506](#15506)) - breaking: edge function build target is now `es2022` ([#15432](#15432)) ### Patch Changes - Updated dependencies [[`fa335bd`](fa335bd), [`3031d89`](3031d89), [`cb9d416`](cb9d416), [`caf3a18`](caf3a18), [`4777827`](4777827), [`a2792e2`](a2792e2), [`ba36148`](ba36148), [`48e8710`](48e8710), [`e2f3075`](e2f3075), [`047d6a0`](047d6a0), [`87603d1`](87603d1), [`096962c`](096962c), [`d545970`](d545970), [`e2f3075`](e2f3075), [`d06affc`](d06affc), [`8af47eb`](8af47eb), [`e2f3075`](e2f3075), [`5c4d130`](5c4d130), [`3f11f35`](3f11f35), [`caf3a18`](caf3a18), [`8823037`](8823037), [`1d76212`](1d76212), [`0dc0548`](0dc0548), [`00d81fa`](00d81fa)]: - @sveltejs/kit@3.0.0-next.0 ## @sveltejs/adapter-node@6.0.0-next.0 ### Major Changes - chore: migrate from rollup to rolldown ([#15297](#15297)) - breaking: require SvelteKit 3 ([#15506](#15506)) ### Patch Changes - Updated dependencies [[`fa335bd`](fa335bd), [`3031d89`](3031d89), [`cb9d416`](cb9d416), [`caf3a18`](caf3a18), [`4777827`](4777827), [`a2792e2`](a2792e2), [`ba36148`](ba36148), [`48e8710`](48e8710), [`e2f3075`](e2f3075), [`047d6a0`](047d6a0), [`87603d1`](87603d1), [`096962c`](096962c), [`d545970`](d545970), [`e2f3075`](e2f3075), [`d06affc`](d06affc), [`8af47eb`](8af47eb), [`e2f3075`](e2f3075), [`5c4d130`](5c4d130), [`3f11f35`](3f11f35), [`caf3a18`](caf3a18), [`8823037`](8823037), [`1d76212`](1d76212), [`0dc0548`](0dc0548), [`00d81fa`](00d81fa)]: - @sveltejs/kit@3.0.0-next.0 ## @sveltejs/adapter-static@4.0.0-next.0 ### Major Changes - breaking: require SvelteKit 3 ([#15506](#15506)) ### Patch Changes - Updated dependencies [[`fa335bd`](fa335bd), [`3031d89`](3031d89), [`cb9d416`](cb9d416), [`caf3a18`](caf3a18), [`4777827`](4777827), [`a2792e2`](a2792e2), [`ba36148`](ba36148), [`48e8710`](48e8710), [`e2f3075`](e2f3075), [`047d6a0`](047d6a0), [`87603d1`](87603d1), [`096962c`](096962c), [`d545970`](d545970), [`e2f3075`](e2f3075), [`d06affc`](d06affc), [`8af47eb`](8af47eb), [`e2f3075`](e2f3075), [`5c4d130`](5c4d130), [`3f11f35`](3f11f35), [`caf3a18`](caf3a18), [`8823037`](8823037), [`1d76212`](1d76212), [`0dc0548`](0dc0548), [`00d81fa`](00d81fa)]: - @sveltejs/kit@3.0.0-next.0 ## @sveltejs/adapter-vercel@7.0.0-next.0 ### Major Changes - chore: use `rolldown` for edge function bundling ([#15432](#15432)) - breaking: edge function build target is now `es2022` ([#15432](#15432)) ### Patch Changes - Updated dependencies [[`fa335bd`](fa335bd), [`3031d89`](3031d89), [`cb9d416`](cb9d416), [`caf3a18`](caf3a18), [`4777827`](4777827), [`a2792e2`](a2792e2), [`ba36148`](ba36148), [`48e8710`](48e8710), [`e2f3075`](e2f3075), [`047d6a0`](047d6a0), [`87603d1`](87603d1), [`096962c`](096962c), [`d545970`](d545970), [`e2f3075`](e2f3075), [`d06affc`](d06affc), [`8af47eb`](8af47eb), [`e2f3075`](e2f3075), [`5c4d130`](5c4d130), [`3f11f35`](3f11f35), [`caf3a18`](caf3a18), [`8823037`](8823037), [`1d76212`](1d76212), [`0dc0548`](0dc0548), [`00d81fa`](00d81fa)]: - @sveltejs/kit@3.0.0-next.0 ## @sveltejs/enhanced-img@1.0.0-next.0 ### Major Changes - breaking: require Node 22 or newer ([#12548](#12548)) ### Minor Changes - breaking: require Vite 8 and `vite-plugin-svelte` 7 ([#15542](#15542)) ## @sveltejs/kit@3.0.0-next.0 ### Major Changes - breaking: TypeScript 6 is now the minimum required version ([#15930](#15930)) - breaking: upgrade to cookie v1. Cookie names must now contain only ASCII characters ([#13386](#13386)) - breaking: require Node 22 or newer ([#12548](#12548)) - breaking: remove the `preloadStrategy` option. `modulepreload` will always be used ([#15256](#15256)) - breaking: default the cookie `path` option to `'/'` ([#15398](#15398)) - breaking: remove `@sveltejs/kit/node/polyfills` ([#15430](#15430)) - breaking: add `config.kit.output.linkHeaderPreload` to preload using the `Link` header ([#15939](#15939)) - breaking: require `@sveltejs/vite-plugin-svelte` v7 ([#15371](#15371)) - breaking: remove `createEntries` from the `Builder` object passed to adapter functions ([#15509](#15509)) - breaking: remove the deprecated CSRF `checkOrigin` option in favor of `trustedOrigins` ([#15437](#15437)) - breaking: the `delta` property now only exists for `popstate` navigation events ([#15522](#15522)) - breaking: remove deprecated `pragma` header in version polling for improved CORS support ([#15428](#15428)) - breaking: require Svelte 5.48.0 or newer ([#15371](#15371)) - chore: change `error`, `isHttpError`, `redirect`, and `isRedirect` to refer to public type instead of internal class ([#15250](#15250)) - breaking: require Vite 8. Provides new functionality even for existing Vite 8 users such as faster builds with Vite hook filters and more powerful SvelteKit adapters with the Vite environment API ([#15371](#15371)) - breaking: remove `data-sveltekit-*` option `'off'` in favour of `false` ([#15907](#15907)) ### Minor Changes - feat: resolve paths using the Vite config `root` option instead of `process.cwd()` to better support monorepo configurations such as Vitest workspaces ([#15469](#15469)) - chore: deprecate `Response` helpers in favor of platform-provided alternatives ([#15448](#15448)) - feat: explicit env vars ([#15934](#15934)) ### Patch Changes - fix: remove check for svelte.config.js before running `sync` ([#15946](#15946)) - fix: generate a placeholder tsconfig.json to squelch sync-time warnings ([#15948](#15948)) - chore: remove dependency on kleur ([#12548](#12548)) - chore: remove dependency on `set-cookie-parser` ([#15384](#15384)) - fix: allow use of `$app/env/public` in service workers ([#15950](#15950)) ## @sveltejs/package@3.0.0-next.0 ### Major Changes - breaking: require Node 22 or newer ([#12548](#12548)) ### Patch Changes - chore: remove dependency on kleur ([#12548](#12548)) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

Initial plan

70c4098

Copilot AI assigned Copilot and benmccann Feb 22, 2026

Copilot started work on behalf of benmccann February 22, 2026 04:36 View session

Replace set-cookie-parser with parseSetCookie from cookie package

2d26c51

Co-authored-by: benmccann <322311+benmccann@users.noreply.github.com>

Copilot AI changed the title ~~[WIP] Update to latest cookie package and remove dependencies~~ Replace set-cookie-parser with parseSetCookie from cookie package Feb 22, 2026

Copilot AI requested a review from benmccann February 22, 2026 04:47

Copilot finished work on behalf of benmccann February 22, 2026 04:47

benmccann changed the title ~~Replace set-cookie-parser with parseSetCookie from cookie package~~ chore: remove dependency on set-cookie-parser Feb 22, 2026

Remove dependency on set-cookie-parser

4e14780

benmccann marked this pull request as ready for review February 22, 2026 06:33

benmccann added this to the 3.0 milestone Feb 22, 2026

benmccann approved these changes Feb 22, 2026

View reviewed changes

teemingc mentioned this pull request Feb 25, 2026

feat: add cookies.setSerialized to create a cookie from a string #13681

Open

6 tasks

Merge branch 'version-3' into copilot/upgrade-cookie-package

43761b0

teemingc approved these changes Feb 25, 2026

View reviewed changes

teemingc merged commit 1d76212 into version-3 Feb 25, 2026
19 of 20 checks passed

teemingc deleted the copilot/upgrade-cookie-package branch February 25, 2026 07:35

github-actions Bot mentioned this pull request Feb 25, 2026

Version Packages (next) #15311

Merged

teemingc linked an issue Feb 25, 2026 that may be closed by this pull request

Various cookie upgrades and package removals #14553

Closed

teemingc mentioned this pull request Feb 25, 2026

Various cookie upgrades and package removals #14553

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore: remove dependency on `set-cookie-parser`#15384

chore: remove dependency on `set-cookie-parser`#15384
teemingc merged 4 commits into
version-3from
copilot/upgrade-cookie-package

Copilot AI commented Feb 22, 2026 •

edited

Loading

Uh oh!

changeset-bot Bot commented Feb 22, 2026 •

edited

Loading

Uh oh!

svelte-docs-bot Bot commented Feb 22, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

Copilot AI commented Feb 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Key changes

Describe the proposed solution

Alternatives considered

Importance

Additional Information

Comments on the Issue (you are @copilot in this section)

Uh oh!

changeset-bot Bot commented Feb 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🦋 Changeset detected

Uh oh!

svelte-docs-bot Bot commented Feb 22, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Copilot AI commented Feb 22, 2026 •

edited

Loading

changeset-bot Bot commented Feb 22, 2026 •

edited

Loading