The refactoring in D16912 looks to have made storage --dry-run actually be wet. Namely:
if ($is_dryrun) { echo tsprintf( "%s\n", pht( 'DRYRUN: Would apply patch "%s" to host "%s".', $key, $ref_key)); } else { echo tsprintf( "%s\n", pht( 'Applying patch "%s" to host "%s"...', $key, $ref_key)); } $t_begin = microtime(true); $api->applyPatch($patch); $t_end = microtime(true);
...looks to apply the patch regardless of the --dry-run flag. That is certainly what we just observed in production, as well.
Running rP 2017 week 17.