[socket-release-bot]

Updates deployment defaults to the published Socket Firewall image 2.16.1 and bumps the Helm chart patch version.

Image: socketdev/socket-registry-firewall:2.16.1
Release run

Manual review is required before merging:

• Review the release changes for configuration or behavioral changes.
• Update deployment documentation and migration examples where needed.
• Check the Helm chart version and CloudFormation defaults, including other pending version PRs.

---

Note

Low Risk
Routine release pin updates across Helm and CloudFormation defaults; runtime behavior depends on what changed in image 2.16.1, which should be reviewed from the release notes.

Overview
This PR aligns deployment defaults with the published socketdev/socket-registry-firewall:2.16.1 release and bumps the Helm chart patch to 0.11.20.

Helm: Chart.yaml sets appVersion to 2.16.1 and chart version to 0.11.20; values.yaml and helm/README.md default image.tag to 2.16.1.

AWS EKS CloudFormation: firewall-eks.yaml defaults FirewallImageTag to 2.16.1 and ChartVersion to 0.11.20; the example dns-override.values.yaml and cloudformation/README.md document the same pins.

No application logic or chart templates change—only version strings and docs that reference them.

^{Reviewed by Cursor Bugbot for commit 32b6718. Configure here.}

[socket-release-bot]

Superseded by #85: firewall 2.16.2 includes 2.16.1.