diff --git a/.github/workflows/release-plz.yml b/.github/workflows/release-plz.yml
index 25bc089..fba861f 100644
--- a/.github/workflows/release-plz.yml
+++ b/.github/workflows/release-plz.yml
@@ -32,6 +32,11 @@ jobs:
         with:
           fetch-depth: 0
       - uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
+      # `cargo publish` verifies by building the packaged tarball, and that build
+      # links libfuse through `fuser` exactly as the CI build jobs do. ci.yml has
+      # installed these since the fuser dependency landed; the publish path never
+      # got the same step, so releases died in verification rather than in CI.
+      - run: sudo apt-get update && sudo apt-get install -y libfuse3-dev pkg-config
       - name: release-plz release
         uses: release-plz/action@e8792575c7f2366cf6ff3ccc33ead9ace5b691c7 # v0.5.130
         with:
@@ -52,6 +57,9 @@ jobs:
         with:
           fetch-depth: 0
       - uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
+      # release-pr runs `cargo package` while searching history for the last
+      # published content, so it needs the same libfuse toolchain as release.
+      - run: sudo apt-get update && sudo apt-get install -y libfuse3-dev pkg-config
       - name: release-plz release-pr
         uses: release-plz/action@e8792575c7f2366cf6ff3ccc33ead9ace5b691c7 # v0.5.130
         with: