Merge branch 'feat/update_openthread_upstream_v5.2' into 'release/v5.2'

feat(openthread): update openthread upstream (v5.2)

See merge request espressif/esp-idf!47468

components/openthread/private_include/openthread-core-esp32x-spinel-config.h

@@ -1,5 +1,5 @@
 /*
- * SPDX-FileCopyrightText: 2021-2025 Espressif Systems (Shanghai) CO LTD
+ * SPDX-FileCopyrightText: 2021-2026 Espressif Systems (Shanghai) CO LTD
  *
  * SPDX-License-Identifier: Apache-2.0
  */
@@ -76,3 +76,15 @@
 #ifndef OPENTHREAD_SPINEL_CONFIG_COPROCESSOR_RESET_FAILURE_CALLBACK_ENABLE
 #define OPENTHREAD_SPINEL_CONFIG_COPROCESSOR_RESET_FAILURE_CALLBACK_ENABLE 1
 #endif
+
+/**
+ * @def OPENTHREAD_CONFIG_MULTIPLE_INSTANCE_ENABLE
+ *
+ * In spinel-only mode no Instance object is compiled or instantiated, so the
+ * single-instance path (Instance::Get().GetLogLevel()) is unavailable. Enabling
+ * multiple-instance support forces the logging APIs to use the global log level
+ * (Instance::GetGlobalLogLevel()), which does not depend on an Instance object.
+ */
+#ifndef OPENTHREAD_CONFIG_MULTIPLE_INSTANCE_ENABLE
+#define OPENTHREAD_CONFIG_MULTIPLE_INSTANCE_ENABLE 1
+#endif

components/openthread/sbom_openthread.yml

@@ -1,8 +1,11 @@
 name: 'openthread'
-version: '2023-07-06'
+version: '2025-06-12'
 cpe: cpe:2.3:o:google:openthread:{}:*:*:*:*:*:*:*
 supplier: 'Organization: Espressif Systems (Shanghai) CO LTD'
 originator: 'Organization: Google LLC'
 description: OpenThread released by Google is an open-source implementation of the Thread networking
 url: https://github.com/espressif/openthread
-hash: b1a37932b1830518f6fa6c92dfb4123a01ac3052
+hash: a98813b30ae58f9a95ece680b9cc46c3874de6ea
+cve-exclude-list:
+  - cve: CVE-2026-8369
+    reason: We use Espressif’s NAT64 implementation and hence this CVE from the upstream NAT64 implementation is not applicable.