[socket-release-bot]

Updates deployment defaults to the published Socket Firewall image 2.16.5 and bumps the Helm chart patch version.

Image: socketdev/socket-registry-firewall:2.16.5
Release run

Manual review is required before merging:

• Review the release changes for configuration or behavioral changes.
• Update deployment documentation and migration examples where needed.
• Check the Helm chart version and CloudFormation defaults, including other pending version PRs.

---

Note

Low Risk
Version-pin updates only; runtime behavior depends on what changed in the 2.16.5 image release, which should be reviewed separately before merge.

Overview
Bumps default deployments from firewall 2.16.2 to 2.16.5 and the Helm chart from 0.11.20 to 0.11.21, keeping appVersion, image.tag, and CloudFormation defaults aligned.

Helm: Chart.yaml appVersion and version, plus helm/values.yaml and helm/README.md default image.tag.

AWS EKS CloudFormation: firewall-eks.yaml parameter defaults ChartVersion and FirewallImageTag, example dns-override.values.yaml, and cloudformation/README.md docs updated to match.

No application logic or chart templates change—only pinned version strings for fresh installs and stack defaults.

^{Reviewed by Cursor Bugbot for commit 4b4de4e. Configure here.}