Non chroot modifications
diff /var/lib/named/etc/bin/dnamed.conf.default-zones /etc/bind/named.conf.default-zones.dpkg-dist
4c4 < file "/etc/bind/db.root"; --- > file "/usr/share/dns/root.hints";
Newer bind versions reference a file /usr/share/dns/root.hints which should be at upgrade time copied from /etc to /var/lib/named/usr/share/dns/root.hints. This seems more and more complicated to maintain a chrooted bind as this new folder should be handled by the Ansible role.
Current post upgrade workaround is to keep the old version in chroot and delete the maintainer version :