[socket-release-bot]

Updates deployment defaults to the published Socket Firewall image 2.9.0 and bumps the Helm chart patch version.

Image: socketdev/socket-registry-firewall:2.9.0
Release run

Manual review is required before merging:

• Review the release changes for configuration or behavioral changes.
• Update deployment documentation and migration examples where needed.
• Check the Helm chart version and CloudFormation defaults, including other pending version PRs.

---

Note

Medium Risk
Deploys a new firewall image version on the supply-chain security path; behavior may differ from 2.8.0 until release notes are reviewed, though changes are limited to default pins and docs.

Overview
Bumps the default Socket Registry Firewall container image from 2.8.0 to 2.9.0 and aligns the Helm chart patch release to 0.11.7 (appVersion and default image.tag).

The same pins are updated in the EKS CloudFormation handoff path: ChartVersion / FirewallImageTag parameters in firewall-eks.yaml, the example dns-override.values.yaml, and the CloudFormation README defaults—so greenfield and doc-driven installs stay consistent with the chart.

^{Reviewed by Cursor Bugbot for commit 69ea12b. Configure here.}