From: Matthijs Mekking <matthijs@isc.org>
Date: Tue, 3 May 2022 10:32:45 +0000 (+0200)
Subject: Add changes and release notes for #3302
X-Git-Tag: v9.19.2~37^2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=0f89f0b1346920224afaccf9d858cee06225832d;p=thirdparty%2Fbind9.git

Add changes and release notes for #3302

Add a comment to make danger happy.
---

diff --git a/CHANGES b/CHANGES
index 5abbe7dc972..92a04312ee4 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+5888.	[bug]		Only write key files if the dnssec-policy keymgr has
+			changed the metadata. [GL #3302]
+
 5887.	[cleanup]	Remove the on-shutdown mechanics from isc_task API.
 			Replace it by isc_task_send() when we are shutting
 			down. [GL !6275]
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index aa545fc852e..d22aea1b55b 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -40,4 +40,6 @@ Feature Changes
 Bug Fixes
 ~~~~~~~~~
 
-- None.
+- Key files were updated every time the ``dnssec-policy`` key manager ran,
+  whether the metadata has changed or not. BIND now checks if changes were
+  applied before writing out the key files. :gl:`#3302`.