feat: Remove minimal js-cookie dependency entirely

[andy-knock]

Description

** Describe what, why and how of the changes clearly and concisely. Add any additional useful context or info, as necessary. **

Todos

** List any todo items necessary before merging, if any. Delete if none. **

• Sample todo item 1
• Sample todo item 2

Tasks

** Link to task(s) which this PR corresponds to. Example: KNO-54 **

Screenshots

** Attach any screenshots or recordings to visually illustrate the changes, as necessary. Delete if not relevant. **

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
docs	Canceled		May 26, 2026 4:32pm

[andy-knock]

Warning

This pull request is not mergeable via GitHub because a downstack PR is open. Once all requirements are satisfied, merge this PR as a stack on Graphite.
Learn more

• feat: Remove minimal js-cookie dependency entirely #1451 👈 (View in Graphite)
• fix(KNO-13317): Remove js-cookie  #1450
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.

[cursor]

Cursor Bugbot has reviewed your changes and found 2 potential issues.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 671507f. Configure here.}

[cursor]

Unresolved merge conflict markers in yarn.lock

High Severity

The yarn.lock file contains unresolved git merge conflict markers (<<<<<<< HEAD, =======, >>>>>>> a2eb14be). This will cause yarn install to fail with a parse error, breaking builds and CI for anyone pulling this branch.

 

^{Reviewed by Cursor Bugbot for commit 671507f. Configure here.}

[cursor]

Runtime js-cookie dependency not removed from package.json

Medium Severity

The PR removes the js-cookie import from lib/attribution.ts and drops @types/js-cookie from devDependencies, but the runtime js-cookie package remains in dependencies (line 55 of package.json). This leaves an unused dependency in the bundle, contradicting the PR's stated goal of removing js-cookie entirely.

 

^{Reviewed by Cursor Bugbot for commit 671507f. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 2 potential issues.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 671507f. Configure here.}

[cursor]

Unresolved merge conflict markers in yarn.lock

High Severity

Git merge conflict markers (<<<<<<< HEAD, =======, >>>>>>> a2eb14be) were committed into yarn.lock. This will cause yarn install to fail with a parse error, breaking CI/CD pipelines and local development for anyone pulling this branch.

 

^{Reviewed by Cursor Bugbot for commit 671507f. Configure here.}

[cursor]

js-cookie runtime dependency not removed from package.json

Medium Severity

The PR removes the only import of js-cookie (in lib/attribution.ts) and removes @types/js-cookie from devDependencies, but js-cookie itself is still listed in dependencies (at line 55 of package.json). This leaves an unused runtime dependency in the bundle, contradicting the PR's stated goal of removing the js-cookie dependency entirely.

 

^{Reviewed by Cursor Bugbot for commit 671507f. Configure here.}