diff --git a/README.md b/README.md
index c3543fe..55ddcad 100644
--- a/README.md
+++ b/README.md
@@ -33,7 +33,7 @@ in a minimal, non-root container without a shell or package manager.
 <!-- tiny-cli-images:version:age:start -->
 
 ```sh
-docker run --rm ghcr.io/unitmatrix/age:1.3.1 --version
+docker run --rm ghcr.io/unitmatrix/age:1.3.1-r1 --version
 ```
 
 <!-- tiny-cli-images:version:age:end -->
@@ -49,7 +49,7 @@ minimal, non-root container with CA certificates for HTTPS requests.
 <!-- tiny-cli-images:version:xh:start -->
 
 ```sh
-docker run --rm ghcr.io/unitmatrix/xh:0.26.2 \
+docker run --rm ghcr.io/unitmatrix/xh:0.26.2-r1 \
   https://example.com
 ```
 
diff --git a/docs/PROJECT.md b/docs/PROJECT.md
index ebe9083..b27797f 100644
--- a/docs/PROJECT.md
+++ b/docs/PROJECT.md
@@ -176,10 +176,10 @@ override for immutable-release recovery. Existing tags are never moved.
 
 <!-- tiny-cli-images:version:xh:start -->
 
-For example, `xh/v0.26.2` publishes:
+For example, `xh/v0.26.2-r1` publishes:
 
 ```text
-ghcr.io/<owner>/xh:0.26.2
+ghcr.io/<owner>/xh:0.26.2-r1
 ```
 
 <!-- tiny-cli-images:version:xh:end -->
diff --git a/images/age/README.md b/images/age/README.md
index 44443ea..3f2caa3 100644
--- a/images/age/README.md
+++ b/images/age/README.md
@@ -13,7 +13,7 @@ Encrypt a file for a recipient:
 
 ```sh
 docker run --rm --interactive \
-  ghcr.io/unitmatrix/age:1.3.1 \
+  ghcr.io/unitmatrix/age:1.3.1-r1 \
   --encrypt \
   --recipient age1... \
   < document.txt \
@@ -25,7 +25,7 @@ Decrypt with an identity mounted under `/work`:
 ```sh
 docker run --rm --interactive \
   --volume "$PWD:/work:ro" \
-  ghcr.io/unitmatrix/age:1.3.1 \
+  ghcr.io/unitmatrix/age:1.3.1-r1 \
   --decrypt \
   --identity /work/key.txt \
   < document.txt.age
@@ -38,7 +38,7 @@ binaries are also available at the filesystem root. For example:
 ```sh
 docker run --rm \
   --entrypoint /age-keygen \
-  ghcr.io/unitmatrix/age:1.3.1
+  ghcr.io/unitmatrix/age:1.3.1-r1
 ```
 
 ## Platforms
diff --git a/images/xh/README.md b/images/xh/README.md
index 222c384..f6ab7ce 100644
--- a/images/xh/README.md
+++ b/images/xh/README.md
@@ -10,7 +10,7 @@ certificates and is published as `ghcr.io/unitmatrix/xh`.
 <!-- tiny-cli-images:version:xh:start -->
 
 ```sh
-docker run --rm ghcr.io/unitmatrix/xh:0.26.2 https://example.com
+docker run --rm ghcr.io/unitmatrix/xh:0.26.2-r1 https://example.com
 ```
 
 Mount files under `/work`, which is the image's working directory:
@@ -18,7 +18,7 @@ Mount files under `/work`, which is the image's working directory:
 ```sh
 docker run --rm \
   --volume "$PWD:/work" \
-  ghcr.io/unitmatrix/xh:0.26.2 \
+  ghcr.io/unitmatrix/xh:0.26.2-r1 \
   GET https://example.com
 ```
 
diff --git a/scripts/update.py b/scripts/update.py
index 9019e1a..619976a 100755
--- a/scripts/update.py
+++ b/scripts/update.py
@@ -218,7 +218,9 @@ def render_documentation(image: str, version: str) -> dict[Path, str]:
     image_readme = ROOT / "images" / image / "README.md"
     start_marker = f"<!-- tiny-cli-images:version:{image}:start -->"
     end_marker = f"<!-- tiny-cli-images:version:{image}:end -->"
-    version_pattern = re.compile(r"(?<![0-9.])[0-9]+\.[0-9]+\.[0-9]+(?![0-9.])")
+    version_pattern = re.compile(
+        r"(?<![0-9.])[0-9]+\.[0-9]+\.[0-9]+(?:-r[1-9][0-9]*)?(?![0-9.])"
+    )
     updates: dict[Path, str] = {}
     marked_paths: set[Path] = set()