Django updates

#37027: refresh_from_db() with from_queryset + prefetch does not persist result in instance ---------

#36953: Refactor Django mail tests -------------------------------------+----------------------------

#27150: Wrong File object behavior if file object has no name attribute -----------------------------

#37020: Adjust release instructions to stop editing *.po files fetched from Transifex ---------------

#36494: Various failures in JSONField lookups when using expressions in right-hand side -------------

#13376: Messages should have an "expire" flag ----------------------------------+----------

#36901: Centralize mitigations against timing attacks targeting user enumeration --------------------

#16429: Allow refresh of path choices for FilePathField -------------------------------------+-------

#36626: Support sub-second resolution in GDAL Features' datetime fields -------------------------

#27737: Investigate if reloading old relational fields in migration operations' state_forwards is

#37025: RemoteUserMiddleware.header does not correspond to request.META in the async path -----------

#37028: Cross-database support for `BitAnd()`, `BitOr()`, and `BitXor()` aggregates -----------------

#37025: RemoteUserMiddleware.header does not correspond to request.META in the async path -----------

#37025: Deprecate the prefixing of HTTP_ to header names in RemoteUserMiddleware.aprocess_request() -

#37026: edit_only not implemented for formsets in GenericInlineModelAdmin ---------------------------

#33113: Add example to documentation of a DateInput with input_type='date' ------------------

#36916: Add support for streaming with TaskGroups -------------------------------------+-------------

#35440: Update parse_header_parameters to leverage the parsing logic from (stdlib) email Message. ---

#25243: inspectdb crashes if SQLite foreign key references sqlite_master ----------------------------

#24434: Django Custom Field inherits ForeignKey deconstruct() fails ---------------------------------

#35959: Admin "Change password" Button Visible with Only "Can view user"

#30577: Custom rendering for readonly fields in admin -------------------------------+---------------

#37024: Integer SITE_ID check incorrect when a different primary key type is used -------------------

#36542: AdminSite views (such as login) leak sensitive POST data ------------------------------------

#36837: Client.force_login won't work for permission-only backends inheriting from BaseBackend --

#37006: Attempting to recreate the PK in a model with no other fields generates a migration that

#37021: Add a helper function to return the permission string representation to be used with `user.

#36816: Allow **kwargs in @task decorator to support custom Task subclasses -------------------------

#15759: list_editable should respect per-object permissions -------------------------------------+---

#36498: Inline button to add first / only related instance should say "Add ...", not "