diff --git a/Cargo.lock b/Cargo.lock
index 58d0653728..cc7a757289 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -4988,9 +4988,9 @@ dependencies = [
 
 [[package]]
 name = "omicron-zone-package"
-version = "0.8.3"
+version = "0.9.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6dc0973625837d1c4e31d4aa60e72008f3af3aa9b0d0ebfd5b5dc67d2e721a48"
+checksum = "620c53207d39a385f298444337d575690e0d9e793561d471ba7a614dc213e372"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -4998,7 +4998,9 @@ dependencies = [
  "filetime",
  "flate2",
  "futures-util",
+ "hex",
  "reqwest",
+ "ring 0.16.20",
  "semver 1.0.20",
  "serde",
  "serde_derive",
diff --git a/Cargo.toml b/Cargo.toml
index 82bca496a5..e30795aa3c 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -256,7 +256,7 @@ omicron-package = { path = "package" }
 omicron-rpaths = { path = "rpaths" }
 omicron-sled-agent = { path = "sled-agent" }
 omicron-test-utils = { path = "test-utils" }
-omicron-zone-package = "0.8.3"
+omicron-zone-package = "0.9.1"
 oxide-client = { path = "clients/oxide-client" }
 oxide-vpc = { git = "https://github.com/oxidecomputer/opte", rev = "258a8b59902dd36fc7ee5425e6b1fb5fc80d4649", features = [ "api", "std" ] }
 once_cell = "1.18.0"
diff --git a/package/src/dot.rs b/package/src/dot.rs
index f6ac32aa3a..133d5c0f00 100644
--- a/package/src/dot.rs
+++ b/package/src/dot.rs
@@ -184,7 +184,7 @@ pub fn do_dot(
                 }
             }
 
-            PackageSource::Local { blobs, rust, paths } => {
+            PackageSource::Local { blobs, rust, paths, .. } => {
                 // Regardless of the type of local package (e.g., files-only or
                 // Rust package or whatever), create nodes showing any S3 blobs
                 // on which it depends.