From: Ondřej Surý <ondrej@isc.org>
Date: Mon, 4 Sep 2023 11:11:49 +0000 (+0200)
Subject: Add CHANGES and release note for [GL #4263]
X-Git-Tag: v9.19.17~14^2
X-Git-Url: http://git.ipfire.org/gitweb/index.cgi?a=commitdiff_plain;h=898f0ee3cf44fead2d4e9596845df65dcc23c58e;p=thirdparty%2Fbind9.git

Add CHANGES and release note for [GL #4263]
---

diff --git a/CHANGES b/CHANGES
index 6af9ebf5a17..6df4547eb3a 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+6239.	[func]		Deprecate the 'dnssec-must-be-secure' option.
+			[GL #3700]
+
 6238.	[cleanup]	Refactor several objects relying on dns_rbt trees
 			to instead of dns_nametree, a wrapper around dns_qp.
 			[GL !8213]
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index ad06ca78b4b..a57ad29ee55 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -27,7 +27,8 @@ New Features
 Removed Features
 ~~~~~~~~~~~~~~~~
 
-- None.
+- The :any:`dnssec-must-be-secure` option has been deprecated and will be
+  removed in a future release. :gl:`#4263`
 
 Feature Changes
 ~~~~~~~~~~~~~~~