diff --git a/plugins/lyhu/tunnel.json b/plugins/lyhu/tunnel.json
index 79bd627..f56f755 100644
--- a/plugins/lyhu/tunnel.json
+++ b/plugins/lyhu/tunnel.json
@@ -3,9 +3,9 @@
   "artifact": {
     "kind": "npm",
     "package": "paseo-plugin-tunnel",
-    "version": "0.3.2",
-    "resolved": "https://registry.npmjs.org/paseo-plugin-tunnel/-/paseo-plugin-tunnel-0.3.2.tgz",
-    "integrity": "sha512-y+L4gbLnYE8qCA3BQEr2sPlVk3+zcAqSRPs6skY6lHzF5gLMaFINLJSod+4zzTTyHp0sNcJodk0G7QsHDb8+Qw=="
+    "version": "0.3.3",
+    "resolved": "https://registry.npmjs.org/paseo-plugin-tunnel/-/paseo-plugin-tunnel-0.3.3.tgz",
+    "integrity": "sha512-xoCAoTnhMn2B6GXnWFIz+iKlI+4h+XBFwWK7tFErpGUi5od7PgLNEupcFYL8SI3unpN3c91d537z+R88OWKBjA=="
   },
   "repository": {
     "url": "https://github.com/lyhu/paseo-plugin-tunnel"
@@ -15,9 +15,12 @@
     "extras"
   ],
   "submittedAt": "2026-10-06",
-  "reviewedAt": "2026-10-06",
   "submittedBy": "lyhu",
+  "reviewedAt": "2026-10-07",
   "listing": {
-    "media": []
+    "media": [
+      "https://raw.githubusercontent.com/lyhu/paseo-plugin-tunnel/b0df77430a93e985eb90b9486f11849456220f3b/images/ingress-list.png",
+      "https://raw.githubusercontent.com/lyhu/paseo-plugin-tunnel/b0df77430a93e985eb90b9486f11849456220f3b/images/egress-list.png"
+    ]
   }
 }
diff --git a/plugins/lyhu/tunnel.md b/plugins/lyhu/tunnel.md
index e4f45c1..168f92b 100644
--- a/plugins/lyhu/tunnel.md
+++ b/plugins/lyhu/tunnel.md
@@ -1,4 +1,4 @@
-HTTP Tunnel lets an HTTP or HTTPS service reachable from one Paseo host be used from another Paseo host you manage, through the Paseo Relay. It forwards HTTP only, including streaming and server-sent events, and does not support TCP, UDP, `CONNECT` or WebSocket upgrade. It requires Paseo 0.8.0 or newer on both hosts.
+HTTP Tunnel lets an HTTP or HTTPS service reachable from one Paseo host be used from another Paseo host you manage, through the Paseo Relay. It forwards HTTP only, including streaming and server-sent events, and does not support TCP, UDP, `CONNECT` or WebSocket upgrade. It requires Paseo 0.10.3 or newer on both hosts.
 
 **Setup.** On the host that can reach the service, you add an Ingress for that origin and copy its Route Offer. On the other host, you add an Egress and paste the offer. The offer contains the relay address, the host's public key and a route secret, so anyone holding it can open that route. Rotating the Ingress secret invalidates every offer already shared.