Thank you Aarti Panchal! And thank you everyone for voting.
Anyone/everyone on this list is of course welcome and encouraged to vote
and it's really cool to see so much healthy community participation.
Re: your notes/non-blockers...
1. good catch! The root cause is exactly as you said. I'm going to
leave it in this release because I don't think it'll cause any harm,
but I am annoyed Claude modified my global ~/.gitignore file,
leading me to miss that file. I'll make sure it is excluded in the
future.
2. Indeed. I noticed this too
<https://github.com/meonkeys/apache-fineract/commit/7b971cd6112ed72b06ee95ec6bd701b65153132c>.
I'll propose changes on that branch in a PR after the release as
part of FINERACT-2901
<https://issues.apache.org/jira/browse/FINERACT-2901>.
Point of clarification: In a VOTE thread, first vote, and include a
short comment if you choose. But keep it simple and use separate threads
(or chat, or PRs, or the issue tracker) for discussion. It eases release
manager work (e.g. tallying votes) and later forensics when we do
this. Follow instructions laid out in both
https://www.apache.org/legal/release-policy.html#release-approval and
https://www.apache.org/foundation/voting .
--
Adam Monsen
Software Engineer » Mifos Initiative (ending Oct 31)
Release Manager » Apache Fineract (ending Oct 31 unless another sponsor is
found)
Author » Steadfast Self-Hosting
PGP key » 0xA9A14F22F57DA182
I'm available for hire! 👋
On Wed, Oct 21, 2026 at 9:19 AM Aarti Panchal
<[email protected]> wrote:
Checked on Windows 11 with Azul Zulu JDK 25.0.4 and GnuPG 2.4.9:
*
Signatures on the src and bin tarballs are good (Adam Monsen's
key A9A14F22F57DA182 from the Fineract KEYS file); the 1.16.0
tag is signed by the same key and points to 6da8a989b3.
*
SHA-512 checksums match, and the SHA3-256 values match the ATR
manifest.
*
LICENSE and NOTICE are present in the source release; no
unexpected binaries (only gradle-wrapper.jar and the dev
keystore.jks, both in git and in 1.15.0 too).
*
Compared the source tarball against the 1.16.0 tag: all 8381
shared files are byte-identical.
*
./gradlew rat passes. ./gradlew build -x test -x doc compiles
every module and produces the WAR and boot jar; the OpenAPI
client SDK generation ran out of heap on my laptop (I had to cap
Gradle at 5 GB instead of the default 12 GB), so that part is my
environment.
Two small non-blocking notes for the next release:
1.
The source tarball contains .claude/settings.local.json, which
is not in git; it looks like a local file from the build machine
that the srcDistTar task picked up because it copies everything
not in its exclude list. Adding '.claude' to the excludes in
fineract-war/build.gradle would keep it out.
2.
NOTICE still says "Copyright 2008-2025".
Thanks to everyone who put this release together.
Regards,
Aarti Panchal
