diff --git a/lib/Cargo.toml b/lib/Cargo.toml
index 619746632..041ec6928 100644
--- a/lib/Cargo.toml
+++ b/lib/Cargo.toml
@@ -11,10 +11,10 @@ rust-version = "1.64.0"
 [dependencies]
 anyhow = "1.0"
 camino = { version = "1.0.4", features = ["serde1"] }
-ostree-ext = "0.11.5"
+ostree-ext = "0.12"
 clap = { version= "4.2", features = ["derive"] }
 clap_mangen = { version = "0.2", optional = true }
-cap-std-ext = "2"
+cap-std-ext = "3"
 hex = "^0.4"
 fn-error-context = "0.2.0"
 gvariant = "0.4.0"
diff --git a/lib/src/install.rs b/lib/src/install.rs
index 32d7d2cb3..44a6e10fa 100644
--- a/lib/src/install.rs
+++ b/lib/src/install.rs
@@ -10,6 +10,7 @@ mod baseline;
 
 use std::io::BufWriter;
 use std::io::Write;
+use std::os::fd::AsFd;
 use std::str::FromStr;
 use std::sync::Arc;
 
@@ -311,7 +312,7 @@ impl SourceInfo {
             .quiet()
             .read()?;
         let root = cap_std::fs::Dir::open_ambient_dir("/", cap_std::ambient_authority())?;
-        let repo = ostree::Repo::open_at_dir(&root, "ostree/repo")?;
+        let repo = ostree::Repo::open_at_dir(root.as_fd(), "ostree/repo")?;
         let root = repo
             .read_commit(commit.trim(), cancellable)
             .context("Reading commit")?