[socket-release-bot]

Updates deployment defaults to the published Socket Firewall image 2.16.4 and bumps the Helm chart patch version.

Image: socketdev/socket-registry-firewall:2.16.4
Release run

Manual review is required before merging:

• Review the release changes for configuration or behavioral changes.
• Update deployment documentation and migration examples where needed.
• Check the Helm chart version and CloudFormation defaults, including other pending version PRs.

---

Note

Low Risk
Version-pin and documentation-only changes; runtime behavior depends on what shipped in image 2.16.4, which should be reviewed against the release notes before merge.

Overview
Bumps default deployment pins from firewall 2.16.2 → 2.16.4 and Helm chart 0.11.20 → 0.11.21, keeping Chart.yaml appVersion, helm/values.yaml, docs, and AWS EKS CloudFormation defaults aligned.

Helm: Chart.yaml version and appVersion, default image.tag in values.yaml, and the documented default in helm/README.md.

CloudFormation (EKS): FirewallImageTag and ChartVersion parameter defaults in firewall-eks.yaml, the example dns-override.values.yaml pin, and matching references in cloudformation/README.md.

No template logic or behavioral config changes—only version strings for fresh installs and reference docs.

^{Reviewed by Cursor Bugbot for commit c6882fc. Configure here.}

[socket-release-bot]

Superseded by #88: firewall 2.16.5 includes 2.16.4.