[socket-release-bot]

Updates deployment defaults to the published Socket Firewall image 2.16.2 and bumps the Helm chart patch version.

Image: socketdev/socket-registry-firewall:2.16.2
Release run

Manual review is required before merging:

• Review the release changes for configuration or behavioral changes.
• Update deployment documentation and migration examples where needed.
• Check the Helm chart version and CloudFormation defaults, including other pending version PRs.

---

Note

Low Risk
Documentation and default version pins only; existing clusters keep their installed image/chart until upgraded.

Overview
Bumps deployment defaults from socketdev/socket-registry-firewall:2.16.0 to 2.16.2, and the Helm chart from 0.11.19 to 0.11.20 (appVersion aligned with image.tag).

The same pins are updated in helm/values.yaml, helm/Chart.yaml, helm/README.md, CloudFormation firewall-eks.yaml parameters (ChartVersion, FirewallImageTag), cloudformation/values/dns-override.values.yaml, and cloudformation/README.md docs. No chart templates or runtime logic change—only version strings for fresh installs and reference deployments.

^{Reviewed by Cursor Bugbot for commit 5aa494a. Configure here.}