diff --git a/kubernetes/apps/ical-proxy/deployment.yaml b/kubernetes/apps/ical-proxy/deployment.yaml
index 5aea815b..26dacbfa 100644
--- a/kubernetes/apps/ical-proxy/deployment.yaml
+++ b/kubernetes/apps/ical-proxy/deployment.yaml
@@ -46,12 +46,15 @@ spec:
           # Retry-After). main-73b5d97 then raises the server WriteTimeout
           # from 10s to 40s (the 30s upstream fetch timeout + 10s headroom),
           # so a slow-but-legitimate upstream is no longer cut off before
-          # /proxy can answer. The summary_match/summary_replace parameters
-          # this deployment needs are unchanged.
+          # /proxy can answer. main-926ead0 caps the upstream response body
+          # at 2 MiB (larger feeds get 413 instead of being buffered whole,
+          # REN-230) and logs upstream fetch failures with the host,
+          # answering 502 instead of 500. The summary_match/summary_replace
+          # parameters this deployment needs are unchanged.
           #
           # Bumping this is a manual, reviewed edit. The tag format is
           # main-<short-sha>, the first 7 characters of the main commit.
-          image: gitea.renner.uno/konairius/ical-proxy:main-73b5d97
+          image: gitea.renner.uno/konairius/ical-proxy:main-926ead0
           ports:
             - containerPort: 8080
               name: http