django.git, branch 5.2.3

[5.2.x] Bumped version for 5.2.3 release.

2025-06-10T09:34:02Z

[5.2.x] Refs #373 -- Doc'd that on_delete is ignored for ForeignObject.

2025-06-10T07:48:25Z

Backport of 76e1ca77bc9cdfa12df9541c32b75af926dbdfea from main.

[5.2.x] Fixed #36449 -- Fixed field types in example model using ForeignObject.

2025-06-10T07:47:37Z

Backport of 59427547692b433bef3640a96cc0f6601f57532f from main.

[5.2.x] Refs #36419 -- Fixed BulkUpdateTests.test_json_field_sql_null() crash on Oracle.

2025-06-10T06:42:37Z

Follow up to c1fa3fdd040718356e5a3b9a0fe699d73f47a940. Backport of f5441e42da691ee2e7aeeb9be70f98e2bce6d17d from main.

[5.2.x] Fixed #36446 -- Restored "q" in internal MediaType.params property.

2025-06-09T20:39:25Z

The "q" key was removed while addressing ticket #36411. Despite `MediaType.params` is undocumented and considered internal, it was used in third-party projects (Zulip reported breakage), so this work restored the `q` key in `params`. Thanks Anders Kaseorg for the report. Regression in c075508b4de8edf9db553b409f8a8ed2f26ecead. Backport of cf5f36bf903a2854f5e395149cee707115b83744 from main.

[5.2.x] Fixed #36419 -- Ensured for_save was propagated when resolving expressions.

2025-06-06T15:41:51Z

The for_save flag wasn't properly propagated when resolving expressions, which prevented get_db_prep_save() from being called in some cases. This affected fields like JSONField where None would be saved as JSON null instead of SQL NULL. Regression in 00c690efbc0b10f67924687f24a7b30397bf47d9. Thanks to David Sanders and Simon Charette for reviews. Co-authored-by: Adam Johnson Backport of c1fa3fdd040718356e5a3b9a0fe699d73f47a940 from main.

[5.2.x] Refs CVE-2025-48432 -- Prevented log injection in remaining response logging.

2025-06-06T12:07:12Z

Migrated remaining response-related logging to use the `log_response()` helper to avoid potential log injection, to ensure untrusted values like request paths are safely escaped. Co-authored-by: Natalia <124304+nessita@users.noreply.github.com> Backport of 957951755259b412d5113333b32bf85871d29814 from main.

[5.2.x] Refs CVE-2025-48432 -- Made SuspiciousOperation logging use log_response() for consistency.

2025-06-06T12:07:06Z

Backport of ff835f439cb1ecd8d74a24de12e3c03e5477dc9d from main.

[5.2.x] Refactored logging_tests to reuse assertions for log records.

2025-06-06T12:06:57Z

Backport of 9d72e7daf7299ef1ece56fd657a02f77a469efe9 from main.

[5.2.x] Updated translations from Transifex.

2025-06-06T11:55:05Z