docs(releases): record the 16.0.0 GA cut and the closed v16 line (#8886) (#8912)

The v16 page and its index entry still described the train as published as
`16.0.0-rc.0`. Tags say otherwise: `@objectstack/spec@16.0.0-rc.0` (2026-07-19),
`-rc.1` (2026-07-20), `16.0.0` (2026-07-21), `16.1.0` (2026-07-22). The series
went GA, took a minor, and closed when 17.0.0 shipped on 2026-08-14.

Four stale surfaces on the page, not one:

1. The release-status blockquote — rewritten as shipped, following the shape
   #8882 set for v17. The "section headings say 16.0.0 for brevity" sentence is
   dropped (it explained a pre-mode convention that no longer exists); the
   trailing 15.1.1 cross-reference is kept verbatim — it is still true.
2. "Console vs. pin" said the pin "has since advanced to `af1b0db` on `main`".
   That advance released: changeset 1965549 bundles `af1b0db96e44` in
   `@objectstack/console` 16.0.0-rc.1.
3. "Console changes after the `rc.0` pin" carried the same `on main` framing.
4. The `Landed since 16.0.0-rc.0` window was left **open** ("roll into the next
   16.0 RC"). It is closed against what actually released it, in the shape the
   v17 windows use. Every entry in it maps to a changeset consumed at the
   `16.0.0-rc.1` cut — #3308 (06ff734), #3347 (6289ec3), #3298 (bfa3c3f),
   #3306 (7125007), #3343 (62a2117), #3350 (674457a), #3332 (e412fb6),
   #3344 (8efa395), #3354 (ee0a499) and the console pin (1965549) — and the
   16.0.0 GA changelog sections re-list rc.0 + rc.1, the signature of
   `changeset pre exit`, so the window shipped in 16.0.0.

The 16.1.0 minor is named as the line's final release but deliberately not
documented: its content is out of this PR's scope.


Claude-Session: https://claude.ai/code/session_011RB4waLuNbdruCo6X9oobm

Co-authored-by: Claude <noreply@anthropic.com>

Author: os-project-manager

content/docs/releases/index.mdx

@@ -19,7 +19,7 @@ migration steps, then covers new capabilities and notable fixes.
 ## Versions
 
 - [v17.0.0](/docs/releases/v17) — Files become owned `sys_file` records with server-enforced `accept`/`maxSize` and a governed download path, bulk export becomes its own opt-in privilege, the SDK is reconciled against the routes the server actually mounts (21 dead methods out, 40+ real ones in), approval nodes route approvers dynamically via CEL expressions and decision outputs, a datasource that cannot connect fails the boot, and Node 22 becomes the supported floor (current series: 17.0.0, released 2026-08-14).
-- [v16.0.0](/docs/releases/v16) — One org identifier (`organizationId`) across hooks and actions, quorum + per-group sign-off (会签) approvals with metadata-declared decision actions, time-relative automations, filtered roll-ups, strict dashboard widgets, an identity-scoped MCP stdio transport, and a platform-wide enforce-or-remove sweep that makes dead metadata loud (current series: 16.0.0-rc.0).
+- [v16.0.0](/docs/releases/v16) — One org identifier (`organizationId`) across hooks and actions, quorum + per-group sign-off (会签) approvals with metadata-declared decision actions, time-relative automations, filtered roll-ups, strict dashboard widgets, an identity-scoped MCP stdio transport, and a platform-wide enforce-or-remove sweep that makes dead metadata loud (final release: 16.1.0).
 - [v15.0.0](/docs/releases/v15) — Explain record access layer by layer, a docked AI workspace in the Console, project-ready Gantt charts, and phone sign-in; 15.1 adds permission-following attachments, no-code third-party connectors, dashboard-wide filters, pinyin search, and whole-record inline editing — with materially safer multi-tenant and write-path defaults (final release: 15.1.1).
 - [v14.0.0](/docs/releases/v14) — ADR-0090 vocabulary convergence completed, object `enable.*` flags become real gates, admin user management, phone/SMS auth, book-audience enforcement, data-lifecycle contract, and effective-dated grants (final release: 14.8.0).
 - [v13.0.0](/docs/releases/v13) — Permission Model v2 (ADR-0090): Roles and Profiles converge on Positions, custom objects default to private, plus an explain engine, delegated administration, and self-serve MCP OAuth.

content/docs/releases/v16.mdx

@@ -13,11 +13,15 @@ and a platform-wide enforce-or-remove sweep turns silently-ignored keys —
 dashboard widget typos, dead hook events, phantom webhook triggers, unknown
 `requires` capabilities — into loud errors at authoring time.
 
-> **Release status:** the 16.0.0 train is currently published as
-> `16.0.0-rc.0`. This page describes the 16.0.0 content; section headings say
-> 16.0.0 for brevity. (15.1.1 was a small patch on the previous line —
-> better-auth family pinning and auth-plugin init isolation — covered by the
-> [v15 page](/docs/releases/v15).)
+> **Release status: 16.0.0 is released.** It was published on 2026-07-21,
+> closing a train that ran through `16.0.0-rc.0` and `16.0.0-rc.1` (cut
+> 2026-07-19 and 2026-07-20). `changeset pre exit` ran with that cut, so the
+> `@objectstack/*` packages no longer publish as `16.0.0-rc.N`. The v16 line is
+> closed: `16.1.0` followed on 2026-07-22 and is its final release, and the
+> current series is [17.0.0](/docs/releases/v17). This page describes the
+> 16.0.0 content; the 16.1.0 minor is not covered here. (15.1.1 was a small
+> patch on the previous line — better-auth family pinning and auth-plugin init
+> isolation — covered by the [v15 page](/docs/releases/v15).)
 
 ## Highlights — 16.0.0
 
@@ -528,8 +532,9 @@ directly) and the removal of the Gantt mobile QR-share context action
 > **Console vs. pin.** This section is sourced from **objectui's own
 > changesets**, not only the `@objectstack/console` bundle-bump summaries (a
 > bump pins a SHA and can lag objectui `main`). The `rc.0` bundle pins
-> `94d4876`; the pin has since advanced to `af1b0db` on `main` — that later
-> Console work is under [Landed since 16.0.0-rc.0](#landed-since-1600-rc0).
+> `94d4876`; the pin advanced to `af1b0db` before the `16.0.0-rc.1` cut — that
+> later Console work is under
+> [Landed since 16.0.0-rc.0](#landed-since-1600-rc0).
 
 ### Approvals inbox goes metadata-driven (#2678 line)
 
@@ -659,15 +664,17 @@ The four frontend changes that were pending when this page was first written
 `numberList` flow mapping — objectui#2708; ActionParamDialog upload guard +
 `autonumber` — objectui#2707; system-field classifier consolidation —
 objectui#2706) **are now bundled**: the console pin advanced `94d4876 →
-af1b0db` on `main`. They plus a further wave of Console work are described
-under [Landed since 16.0.0-rc.0](#landed-since-1600-rc0) below.
+af1b0db`, released as `@objectstack/console` 16.0.0-rc.1. They plus a further
+wave of Console work are described under
+[Landed since 16.0.0-rc.0](#landed-since-1600-rc0) below.
 
 ## Landed since 16.0.0-rc.0
 
-These changes are on `main` after the `rc.0` cut and **roll into the next 16.0
-RC** — backend from the pending changesets, Console from the objectui pin
-advancing `94d4876 → af1b0db` (objectui #2706–#2736). Sourced from each repo's
-own changesets.
+These changes are on `main` after the `rc.0` cut and **rolled into
+`16.0.0-rc.1`**, cut on 2026-07-20 — the train's last RC, so every entry below
+shipped in **16.0.0**. Backend from those changesets, Console from the objectui
+pin advancing `94d4876 → af1b0db` (objectui #2706–#2736), bundled as
+`@objectstack/console` 16.0.0-rc.1. Sourced from each repo's own changesets.
 
 ### Breaking / behavior