diff --git a/Cargo.lock b/Cargo.lock
index 4df8c118d..f888a4b7b 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -34,9 +34,9 @@ checksum = "a23eb6b1614318a8071c9b2521f36b424b2c83db5eb3a0fead4a6c0809af6e61"
 
 [[package]]
 name = "astral-tokio-tar"
-version = "0.6.0"
+version = "0.5.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3c23f3af104b40a3430ccb90ed5f7bd877a8dc5c26fc92fde51a22b40890dcf9"
+checksum = "ec179a06c1769b1e42e1e2cbe74c7dcdb3d6383c838454d063eaac5bbb7ebbe5"
 dependencies = [
  "filetime",
  "futures-core",
@@ -913,7 +913,7 @@ checksum = "bcc35a38544a891a5f7c865aca548a982ccb3b8650a5b06d0fd33a10283c56fc"
 
 [[package]]
 name = "libpkgx"
-version = "0.8.0"
+version = "0.8.1"
 dependencies = [
  "anyhow",
  "astral-tokio-tar",
@@ -1202,7 +1202,7 @@ checksum = "953ec861398dccce10c670dfeaf3ec4911ca479e9c02154b3a215178c5f566f2"
 
 [[package]]
 name = "pkgx"
-version = "2.10.1"
+version = "2.10.2"
 dependencies = [
  "console",
  "indicatif",
diff --git a/crates/cli/Cargo.toml b/crates/cli/Cargo.toml
index 5d1439447..140e15548 100644
--- a/crates/cli/Cargo.toml
+++ b/crates/cli/Cargo.toml
@@ -3,7 +3,7 @@ name = "pkgx"
 description = "Run anything"
 authors = ["Max Howell <mxcl@me.com>", "Jacob Heider <jacob@pkgx.dev>"]
 license = "Apache-2.0"
-version = "2.10.1"
+version = "2.10.2"
 edition = "2021"
 repository = "https://github.com/pkgxdev/pkgx"
 
@@ -15,7 +15,7 @@ nix = { workspace = true }
 serde = { workspace = true }
 indicatif = "0.18.3"
 serde_json = "1.0.135"
-libpkgx = { version = "0.8.0", path = "../lib" }
+libpkgx = { version = "0.8.1", path = "../lib" }
 console = { version = "0.16", default-features = false, features = [
   "ansi-parsing",
 ] }
diff --git a/crates/lib/Cargo.toml b/crates/lib/Cargo.toml
index e089edc38..68cb85ee3 100644
--- a/crates/lib/Cargo.toml
+++ b/crates/lib/Cargo.toml
@@ -3,7 +3,7 @@ name = "libpkgx"
 description = "Install and run `pkgx` packages"
 authors = ["Max Howell <mxcl@me.com>", "Jacob Heider <jacob@pkgx.dev>"]
 license = "Apache-2.0"
-version = "0.8.0"
+version = "0.8.1"
 edition = "2021"
 repository = "https://github.com/pkgxdev/pkgx"
 
@@ -25,7 +25,8 @@ strum = "0.28"
 strum_macros = "0.28"
 reqwest = { version = "0.13", features = ["stream", "blocking"] }
 async-compression = { version = "0.4", features = ["tokio", "gzip", "xz"] }
-astral-tokio-tar = "0.6.0"
+# pinned: 0.6.0 rejects PAX extensions in some macOS-built package tarballs
+astral-tokio-tar = "=0.5.6"
 tokio-util = { version = "0.7.13", features = ["compat"] }
 futures = "0.3.31"
 lazy_static = "1.5.0"