Implement a upstream version check a startup
The BIND would have an option to issue a special query to predefined server(s) to check whether a new upstream version is available and the recommended course of action (CRITICAL, RECOMMENDED, MINOR upgrade).
There's a similar feature in PowerDNS and Knot DNS servers.
The option would be enabled for builds from the source, and disabled for pre-packaged builds.