Add CHANGES and release note for [GL #4263]

(cherry picked from commit 898f0ee3cf44fead2d4e9596845df65dcc23c58e)

diff --git a/CHANGES b/CHANGES
index b6f48604718a1f5c54e1ded1638b649a29a246ad..4e520df054ab22d5329f2d8177b41632c5f0ef47 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+6239.  [func]          Deprecate the 'dnssec-must-be-secure' option.
+                       [GL #3700]
+
 6237.  [bug]           Address memory leaks due to not clearing OpenSSL error
                        stack. [GL #4159]
 

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 24f203293418c629bbb340f5c60589bfba723084..7b2a619bffdc03b667c7fd754083d396d1616b9b 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -25,7 +25,8 @@ New Features
 Removed Features
 ~~~~~~~~~~~~~~~~
 
-- None.
+- The :any:`dnssec-must-be-secure` option has been deprecated and will be
+  removed in a future release. :gl:`#4263`
 
 Feature Changes
 ~~~~~~~~~~~~~~~