Update dependency react-iframe to v2

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
react-iframe	^1.8.0 → ^2.0.0

---

Release Notes

svenanders/react-iframe (react-iframe)

v2.0.1

Compare Source

Fixes

• onError: pass the native DOM Event instead of casting it to a React synthetic event. The listener is kept stable across handler identity changes.
• refs: keep the host ref callback stable so an inline ref does not retrigger null / node on every parent render.
• useIframeMessage: optional source filter matches event.source to the iframe's contentWindow. origin: "null" matches srcDoc frames.
• postToIframe: targetOrigin is required. Pass the child origin, or "*" for srcDoc / opaque origins (browsers reject "null" as a target origin).

v2.0.0

Compare Source

Breaking

• Require React 18+ (React 19 supported). React 16/17 should stay on 1.8.5.
• Dual ESM/CJS package with an exports map. Types live in dist/ instead of the repo root.
• Drop the object-assign runtime dependency.
• Do not force display: initial or allowFullScreen="allowFullScreen".
• Stop writing target and key onto the DOM node.
• onLoad / onError / mouse handlers use React’s event types instead of () => void.

Fixes

• sandbox: a string value is no longer spread into individual characters ("allow-scripts" no longer becomes "a l l o w - s c r i p t s").
• allowFullScreen: honor the boolean; merge fullscreen into allow with semicolons and without duplicates (#​139).
• refs: forwardRef to the underlying HTMLIFrameElement (#​54, #​43).
• events: onLoad receives the synthetic event; onError is supported (#​67, #​136).
• docs: sandbox arrays use square brackets (#​135).

Features

• Pass through native iframe attributes (srcDoc, fetchPriority, credentialless, referrerPolicy, …).
• srcDoc for inline HTML documents (#​55).
• useIframeMessage and postToIframe helpers for postMessage.
• Deprecated aliases: referrerpolicy, importance, allowpaymentrequest.

v1.8.5

Compare Source

v1.8.4

Compare Source

v1.8.3

Compare Source

v1.8.2

Compare Source

v1.8.1

Compare Source

Bug Fixes

• merge styles into style (93d9bfe)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: frontend/package-lock.json

npm warn Unknown env config "store". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm error code ERESOLVE
npm error ERESOLVE unable to resolve dependency tree
npm error
npm error While resolving: frontend@0.1.0
npm error Found: react@16.14.0
npm error node_modules/react
npm error   react@"^16.12.0" from the root project
npm error
npm error Could not resolve dependency:
npm error peer react@">=18" from react-iframe@2.0.1
npm error node_modules/react-iframe
npm error   react-iframe@"^2.0.0" from the root project
npm error
npm error Fix the upstream dependency conflict, or retry this command with --force or --legacy-peer-deps to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /runner/cache/others/npm/_logs/2026-09-10T17_56_18_930Z-eresolve-report.txt
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2026-09-10T17_56_18_930Z-debug-0.log