From 641da0ff0fde55b5c9a614decb54ec02f8e6503c Mon Sep 17 00:00:00 2001
From: Matthijs Mekking <matthijs@isc.org>
Date: Fri, 13 Oct 2023 16:46:25 +0200
Subject: [PATCH] Add changes and release note for #4350

(cherry picked from commit a8306b541b3204ab746486814a9c7b8f8475196d)
---
 CHANGES                     | 3 +++
 doc/notes/notes-current.rst | 4 +++-
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/CHANGES b/CHANGES
index 41fde2e83c..1d3064e7c4 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+6265.	[bug]		Don't schedule resign operations on the raw version
+			of an inline-signing zone. [GL #4350]
+
 6261.	[bug]		Fix a possible assertion failure on an error path in
 			resolver.c:fctx_query(), when using an uninitialized
 			link. [GL #4331]
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 1d9d712db7..1c3a09a6f1 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -35,7 +35,9 @@ Feature Changes
 Bug Fixes
 ~~~~~~~~~
 
-- None.
+- For inline-signing zones, if the unsigned version of the zone contains
+  DNSSEC records, it was scheduled to be resigning. This unwanted behavior
+  has been fixed. :gl:`#4350`
 
 Known Issues
 ~~~~~~~~~~~~