Add changes and release notes for #3302

Add a comment to make danger happy.

(cherry picked from commit 0f89f0b1346920224afaccf9d858cee06225832d)

diff --git a/CHANGES b/CHANGES
index 279d26fac2deb170fa09bd7fcee00f60fefaa40e..161f2fc3f299031cf06a0b238b797373738e63fb 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -4,6 +4,9 @@
                        rather than the intended value.  This has been
                        fixed. [GL #3327]
 
+5888.  [bug]           Only write key files if the dnssec-policy keymgr has
+                       changed the metadata. [GL #3302]
+
 5885.  [bug]           RPZ NSIP and NSDNAME rule processing didn't handle stub
                        and static-stub zones at or above the query name.  This
                        has now been addressed. [GL #3232]

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 5a2d9bfe598b073d15d9582c5d61263c617fa2a7..e786ef5e99ed33cb22a1278289d9a53e3863c6d8 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -40,4 +40,6 @@ Feature Changes
 Bug Fixes
 ~~~~~~~~~
 
-- None.
+- Key files were updated every time the ``dnssec-policy`` key manager ran,
+  whether the metadata has changed or not. BIND now checks if changes were
+  applied before writing out the key files. :gl:`#3302`.