changelog for release 2.5.3

Author: hmakholm

CHANGELOG.md

@@ -1,5 +1,66 @@
 # CodeQL CLI changelog
 
+<-- *********************************
+    **                             **
+    **   DO NOT EDIT THIS FILE!    **
+    **                             **
+    *********************************
+.
+    Pull requests should instead drop Markdown snippets in the
+    subdirectory `unreleased-changelog-entries` found next to
+    the authoritative copy of this file in semmle-code.
+    Please include a three-hash heading such as "Bugs Fixed"
+    and format your snippet as a list item.
+.
+    (Okay, if you're the CLI release manager following the
+    checklist for a CLI release, you can edit here. But then
+    you know what to do).
+-->
+
+## Release 2.5.3 (2021-04-30)
+
+- The bundled extractors are updated to match the versions currently
+  used on LGTM.com. These are newer than the last release (1.27) of
+  LGTM Enterprise. If you plan to upload databases to an LGTM
+  Enterprise 1.27 instance, you need to create them with release
+  2.4.6.
+
+### Features added
+
+- `codeql database analyze` and `codeql database interpret-results`
+  now report the results of summary metric queries in the
+  `<run>.properties.metricResults` property of the SARIF output.
+  Summary metric queries describe metrics about the code analyzed by
+  CodeQL. They are identified by the query metadata `@kind metric` and
+  `@tag summary`.
+  For example, see the [lines of code summary metric query for
+  C++](https://github.com/github/codeql/blob/main/cpp/ql/src/Summary/LinesOfCode.ql).
+
+- `codeql database analyze` and `codeql database interpret-results`
+  now calculate an
+  [automation ID](https://docs.oasis-open.org/sarif/sarif/v2.1.0/cs01/sarif-v2.1.0-cs01.html#_Toc16012482)
+  and add it to the resulting SARIF. In SARIF v2.1.0, this field is
+  `runs[].automationDetails.id`.  In SARIF v2, this field is
+  `runs[].automationLogicalId`. In SARIF v1, this field is
+  `runs[].automationId`. By default, this automation ID will be
+  derived from the database language and the operating system of the
+  machine that performed the run. It can be set explicitly using a new
+  `--sarif-category` option.
+
+- In query metadata, `@kind alert` and `@kind path-alert` are now
+  recognized as (more accurate) synonyms of `@kind problem` and
+  `@kind path-problem`, respectively.
+
+- Diagnostic queries are now permitted by the metadata verifier. They
+  are identified by `@kind diagnostic` metadata. Currently the result
+  patterns of diagnostic queries are not verified. This will change in
+  a future CLI release.
+
+### Bugs fixed
+
+- Ensure the correct URL is generated during `codeql github upload-results`
+  for GitHub Enterprise Server.
+
 ## Release 2.5.2 (2021-04-21)
 
 This release is identical to release 2.5.1, except that an internal