[socket-release-bot]

Updates deployment defaults to the published Socket Firewall image 2.16.3 and bumps the Helm chart patch version.

Image: socketdev/socket-registry-firewall:2.16.3
Release run

Manual review is required before merging:

• Review the release changes for configuration or behavioral changes.
• Update deployment documentation and migration examples where needed.
• Check the Helm chart version and CloudFormation defaults, including other pending version PRs.

---

Note

Low Risk
Version-pin and documentation-only updates; runtime behavior changes only if 2.16.3 itself introduces them, so confirm the release notes before merge.

Overview
Bumps default deployments from socketdev/socket-registry-firewall:2.16.2 to 2.16.3 and raises the Helm chart patch release 0.11.20 → 0.11.21 with matching appVersion and image.tag in helm/values.yaml.

The same pins are applied to the EKS CloudFormation handoff path: ChartVersion / FirewallImageTag defaults in firewall-eks.yaml, the example dns-override.values.yaml, and the related README defaults—no template or chart logic changes.

^{Reviewed by Cursor Bugbot for commit 081d85b. Configure here.}

[socket-release-bot]

Superseded by #87: firewall 2.16.4 includes 2.16.3.