Add changes and release notes for #3302

Add a comment to make danger happy.

(cherry picked from commit 0f89f0b1346920224afaccf9d858cee06225832d)

diff --git a/CHANGES b/CHANGES
index ed010e67e98eac0a0f3c54feefbed1e798c224ed..d20a2ebecfdd9a86ceeeb867585e67d91f863652 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -4,6 +4,9 @@
                        rather than the intended value.  This has been
                        fixed. [GL #3327]
 
+5888.  [bug]           Only write key files if the dnssec-policy keymgr has
+                       changed the metadata. [GL #3302]
+
 5885.  [bug]           RPZ NSIP and NSDNAME rule processing didn't handle stub
                        and static-stub zones at or above the query name.  This
                        has now been addressed. [GL #3232]

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 3816c94f016f2a0b5ce47e2cb39a95f21eec00b6..37d9d630c4d210ef1231752ea5e34b2502bd4bdd 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -40,4 +40,6 @@ Feature Changes
 Bug Fixes
 ~~~~~~~~~
 
-- None.
+- Key files were updated every time the ``dnssec-policy`` key manager ran,
+  whether the metadata has changed or not. BIND now checks if changes were
+  applied before writing out the key files. :gl:`#3302`.