I just did a do-release-upgrade of the OS from Ubuntu 14.04 to Ubuntu 16.04 (instructions).
Seems to have gone well.
Per the Discourse installation instructions I then performed dpkg-reconfigure -plow unattended-upgrades so that security updates are applied automatically.
I got this -
That is to say, the Ubuntu 14 version had "${distro_id}:${distro_codename}";
as well as "${distro_id}:${distro_codename}-security";
which is in the old and the new file.