diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0af0ef1..03ce0ef 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -14,6 +14,20 @@ Two version streams move independently:
 
 ## [Unreleased]
 
+## [1.9.3] — 2026-10-21
+
+Re-cut of 1.9.2 so its signed binaries get published: the release pipeline
+stopped on a tooling version check before building them. The application is
+unchanged from 1.9.2. Chart `1.10.3` accompanies this release.
+
+### Chart
+
+- **`chart/1.10.3`** — `appVersion` follows the app to `1.9.3`. The readiness
+  probe now waits up to 3s (was the 1s Kubernetes default). `/readyz` checks
+  the upstream S3 with a 2s budget, so a slightly slow upstream used to show
+  up as sporadic `Readiness probe failed` events even though the proxy was
+  fine.
+
 ## [1.9.2] — 2026-10-21
 
 Security maintenance. No functional change over 1.9.1 — same behaviour, patched
diff --git a/README.md b/README.md
index d370645..18c1d05 100644
--- a/README.md
+++ b/README.md
@@ -280,7 +280,7 @@ Top-level value keys:
 | `service.type` / `service.port` | `ClusterIP` / `4433` | Standard k8s Service. |
 | `ingress.enabled` | `false` | Optional Ingress. |
 | `resources` | `cpu: 250m/500m`, `mem: 128Mi/256Mi` | k8s requests/limits. |
-| `livenessProbe` / `readinessProbe` | `/healthz` / `/readyz` on `4433` (HTTPS) | Standard probes. |
+| `livenessProbe` / `readinessProbe` | `/healthz` / `/readyz` on `4433` (HTTPS); readiness `timeoutSeconds: 3` | Standard probes. `/readyz` checks the upstream (ListBuckets, 2s budget), so keep its timeout above 2s. |
 | `autoscaling` | disabled | HPA on CPU/memory. |
 | `serviceMonitor` | disabled | Prometheus Operator scrape config. |
 | `prometheusRule` | disabled | Alert bundle. |
diff --git a/charts/s3proxy/Chart.yaml b/charts/s3proxy/Chart.yaml
index 644654e..bf13825 100644
--- a/charts/s3proxy/Chart.yaml
+++ b/charts/s3proxy/Chart.yaml
@@ -18,5 +18,5 @@ maintainers:
 annotations:
   org.opencontainers.image.source: "https://github.com/intrinsec/s3proxy/"
 type: application
-version: 1.10.2
-appVersion: "1.9.2"
+version: 1.10.3
+appVersion: "1.9.3"
diff --git a/charts/s3proxy/values.yaml b/charts/s3proxy/values.yaml
index df55c2b..622fcf7 100644
--- a/charts/s3proxy/values.yaml
+++ b/charts/s3proxy/values.yaml
@@ -128,6 +128,10 @@ readinessProbe:
     path: /readyz  # Readiness endpoint
     port: 4433
     scheme: HTTPS
+  # /readyz issues a ListBuckets against the upstream and waits up to 2s for
+  # it. Keep the probe timeout above that, or a slow upstream call is cut by
+  # the kubelet at the 1s default and logged as a failed probe.
+  timeoutSeconds: 3
 
 autoscaling:
   enabled: false