diff --git a/Cargo.lock b/Cargo.lock
index d8d1343..8b301cc 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -110,7 +110,7 @@ dependencies = [
  "dirs",
  "fs4",
  "oci-client",
- "oci-spec",
+ "oci-spec 0.10.0",
  "regex",
  "reqwest",
  "serde",
@@ -2258,7 +2258,7 @@ dependencies = [
  "http-auth",
  "jsonwebtoken",
  "lazy_static",
- "oci-spec",
+ "oci-spec 0.9.0",
  "olpc-cjson",
  "regex",
  "reqwest",
@@ -2288,6 +2288,23 @@ dependencies = [
  "thiserror 2.0.18",
 ]
 
+[[package]]
+name = "oci-spec"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3df6f876ad774d6a676f7e968f5c3edacc32f90e65fe680a8b686235396556fb"
+dependencies = [
+ "const_format",
+ "derive_builder",
+ "getset",
+ "regex",
+ "serde",
+ "serde_json",
+ "strum",
+ "strum_macros",
+ "thiserror 2.0.18",
+]
+
 [[package]]
 name = "olpc-cjson"
 version = "0.1.4"
diff --git a/crates/act-store/Cargo.toml b/crates/act-store/Cargo.toml
index 706d37d..b583b0e 100644
--- a/crates/act-store/Cargo.toml
+++ b/crates/act-store/Cargo.toml
@@ -15,7 +15,7 @@ serde_json.workspace = true
 sha2.workspace = true
 thiserror = "2"
 fs4 = { version = "1", features = ["sync"] }
-oci-spec = "0.9.0"
+oci-spec = "0.10.0"
 dirs.workspace = true
 tokio = { workspace = true, features = ["rt", "macros", "fs", "io-util"] }
 oci-client.workspace = true