Use packaging revision image tags in documentation

README.md

@@ -33,7 +33,7 @@ in a minimal, non-root container without a shell or package manager.
 <!-- tiny-cli-images:version:age:start -->
 
 ```sh
-docker run --rm ghcr.io/unitmatrix/age:1.3.1 --version
+docker run --rm ghcr.io/unitmatrix/age:1.3.1-r1 --version
 ```
 
 <!-- tiny-cli-images:version:age:end -->
@@ -49,7 +49,7 @@ minimal, non-root container with CA certificates for HTTPS requests.
 <!-- tiny-cli-images:version:xh:start -->
 
 ```sh
-docker run --rm ghcr.io/unitmatrix/xh:0.26.2 \
+docker run --rm ghcr.io/unitmatrix/xh:0.26.2-r1 \
   https://example.com
 ```
 

docs/PROJECT.md

@@ -176,10 +176,10 @@ override for immutable-release recovery. Existing tags are never moved.
 
 <!-- tiny-cli-images:version:xh:start -->
 
-For example, `xh/v0.26.2` publishes:
+For example, `xh/v0.26.2-r1` publishes:
 
 ```text
-ghcr.io/<owner>/xh:0.26.2
+ghcr.io/<owner>/xh:0.26.2-r1
 ```
 
 <!-- tiny-cli-images:version:xh:end -->

images/age/README.md

@@ -13,7 +13,7 @@ Encrypt a file for a recipient:
 
 ```sh
 docker run --rm --interactive \
-  ghcr.io/unitmatrix/age:1.3.1 \
+  ghcr.io/unitmatrix/age:1.3.1-r1 \
   --encrypt \
   --recipient age1... \
   < document.txt \
@@ -25,7 +25,7 @@ Decrypt with an identity mounted under `/work`:
 ```sh
 docker run --rm --interactive \
   --volume "$PWD:/work:ro" \
-  ghcr.io/unitmatrix/age:1.3.1 \
+  ghcr.io/unitmatrix/age:1.3.1-r1 \
   --decrypt \
   --identity /work/key.txt \
   < document.txt.age
@@ -38,7 +38,7 @@ binaries are also available at the filesystem root. For example:
 ```sh
 docker run --rm \
   --entrypoint /age-keygen \
-  ghcr.io/unitmatrix/age:1.3.1
+  ghcr.io/unitmatrix/age:1.3.1-r1
 ```
 
 ## Platforms

images/xh/README.md

@@ -10,15 +10,15 @@ certificates and is published as `ghcr.io/unitmatrix/xh`.
 <!-- tiny-cli-images:version:xh:start -->
 
 ```sh
-docker run --rm ghcr.io/unitmatrix/xh:0.26.2 https://example.com
+docker run --rm ghcr.io/unitmatrix/xh:0.26.2-r1 https://example.com
 ```
 
 Mount files under `/work`, which is the image's working directory:
 
 ```sh
 docker run --rm \
   --volume "$PWD:/work" \
-  ghcr.io/unitmatrix/xh:0.26.2 \
+  ghcr.io/unitmatrix/xh:0.26.2-r1 \
   GET https://example.com
 ```
 

scripts/update.py

@@ -218,7 +218,9 @@ def render_documentation(image: str, version: str) -> dict[Path, str]:
     image_readme = ROOT / "images" / image / "README.md"
     start_marker = f"<!-- tiny-cli-images:version:{image}:start -->"
     end_marker = f"<!-- tiny-cli-images:version:{image}:end -->"
-    version_pattern = re.compile(r"(?<![0-9.])[0-9]+\.[0-9]+\.[0-9]+(?![0-9.])")
+    version_pattern = re.compile(
+        r"(?<![0-9.])[0-9]+\.[0-9]+\.[0-9]+(?:-r[1-9][0-9]*)?(?![0-9.])"
+    )
     updates: dict[Path, str] = {}
     marked_paths: set[Path] = set()