Add changes and release notes for #3302

Add a comment to make danger happy.

diff --git a/CHANGES b/CHANGES
index 5abbe7dc9721ed8ba9e90dbc875f888833c2e371..92a04312ee49267e7b3d67f0a067d077232cb7f8 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+5888.  [bug]           Only write key files if the dnssec-policy keymgr has
+                       changed the metadata. [GL #3302]
+
 5887.  [cleanup]       Remove the on-shutdown mechanics from isc_task API.
                        Replace it by isc_task_send() when we are shutting
                        down. [GL !6275]

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index aa545fc852e506bcca2c566491da883d8fb5e81b..d22aea1b55b7ad880570bc494b619ace3e33b490 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -40,4 +40,6 @@ Feature Changes
 Bug Fixes
 ~~~~~~~~~
 
-- None.
+- Key files were updated every time the ``dnssec-policy`` key manager ran,
+  whether the metadata has changed or not. BIND now checks if changes were
+  applied before writing out the key files. :gl:`#3302`.