[socket-release-bot]

Updates deployment defaults to the published Socket Firewall image 2.11.1 and bumps the Helm chart patch version.

Image: socketdev/socket-registry-firewall:2.11.1
Release run

Manual review is required before merging:

• Review the release changes for configuration or behavioral changes.
• Update deployment documentation and migration examples where needed.
• Check the Helm chart version and CloudFormation defaults, including other pending version PRs.

---

Note

Low Risk
Version-only default bumps across Helm and CloudFormation; no application logic or security behavior changes in this diff.

Overview
Bumps the default Socket Registry Firewall container image from 2.11.0 to 2.11.1 and aligns the Helm chart patch release to 0.11.11 (appVersion matches the image).

The same pins appear in helm/values.yaml, CloudFormation EKS defaults (ChartVersion, FirewallImageTag), the DNS-override example values file, and the related README tables—so greenfield Helm and CloudFormation handoff installs pick up the new image without extra --set overrides.

^{Reviewed by Cursor Bugbot for commit 6a50480. Configure here.}