diff --git a/package-lock.json b/package-lock.json
index d5f28f490..6bedd76b5 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,18 +1,18 @@
 {
   "name": "koa",
-  "version": "2.13.1",
+  "version": "3.0.0-alpha.1",
   "lockfileVersion": 2,
   "requires": true,
   "packages": {
     "": {
-      "version": "2.13.1",
+      "version": "3.0.0-alpha.1",
       "license": "MIT",
       "dependencies": {
         "accepts": "^1.3.5",
         "cache-content-type": "^1.0.0",
         "content-disposition": "~0.5.2",
         "content-type": "^1.0.4",
-        "cookies": "~0.8.0",
+        "cookies": "~0.9.0",
         "debug": "^4.3.2",
         "delegates": "^1.0.0",
         "destroy": "^1.0.4",
@@ -1726,9 +1726,9 @@
       "dev": true
     },
     "node_modules/cookies": {
-      "version": "0.8.0",
-      "resolved": "https://registry.npmjs.org/cookies/-/cookies-0.8.0.tgz",
-      "integrity": "sha512-8aPsApQfebXnuI+537McwYsDtjVxGm8gTIzQI3FDW6t5t/DAhERxtnbEPN/8RX+uZthoz4eCOgloXaE5cYyNow==",
+      "version": "0.9.0",
+      "resolved": "https://registry.npmjs.org/cookies/-/cookies-0.9.0.tgz",
+      "integrity": "sha512-mtyMqy14RsH7+IRJglGcKtRLOq0SRt0DdXVrLgc+v1e/o0TNJUpdElhgr3AAi638LO0xZwEPcRRkJ3afxvGhUw==",
       "dependencies": {
         "depd": "~2.0.0",
         "keygrip": "~1.1.0"
@@ -6843,9 +6843,9 @@
       "dev": true
     },
     "cookies": {
-      "version": "0.8.0",
-      "resolved": "https://registry.npmjs.org/cookies/-/cookies-0.8.0.tgz",
-      "integrity": "sha512-8aPsApQfebXnuI+537McwYsDtjVxGm8gTIzQI3FDW6t5t/DAhERxtnbEPN/8RX+uZthoz4eCOgloXaE5cYyNow==",
+      "version": "0.9.0",
+      "resolved": "https://registry.npmjs.org/cookies/-/cookies-0.9.0.tgz",
+      "integrity": "sha512-mtyMqy14RsH7+IRJglGcKtRLOq0SRt0DdXVrLgc+v1e/o0TNJUpdElhgr3AAi638LO0xZwEPcRRkJ3afxvGhUw==",
       "requires": {
         "depd": "~2.0.0",
         "keygrip": "~1.1.0"
diff --git a/package.json b/package.json
index 1cad689b6..3214d409c 100644
--- a/package.json
+++ b/package.json
@@ -39,7 +39,7 @@
     "cache-content-type": "^1.0.0",
     "content-disposition": "~0.5.2",
     "content-type": "^1.0.4",
-    "cookies": "~0.8.0",
+    "cookies": "~0.9.0",
     "debug": "^4.3.2",
     "delegates": "^1.0.0",
     "destroy": "^1.0.4",