diff --git a/Cargo.lock b/Cargo.lock
index dab4c01..a63239f 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2111,7 +2111,7 @@ dependencies = [
 [[package]]
 name = "openshell-core"
 version = "0.0.0"
-source = "git+https://github.com/NVIDIA/OpenShell?tag=v0.1.7#5d25211b25a8fc887e8d5c606d57d6ab22f1d76c"
+source = "git+https://github.com/NVIDIA/OpenShell?tag=v0.1.8-pre.3#53b8eec29cadab70e11be88776cf14a0fc6a7fdd"
 dependencies = [
  "async-trait",
  "base64 0.22.1",
@@ -2146,7 +2146,7 @@ dependencies = [
 [[package]]
 name = "openshell-crypto"
 version = "0.0.0"
-source = "git+https://github.com/NVIDIA/OpenShell?tag=v0.1.7#5d25211b25a8fc887e8d5c606d57d6ab22f1d76c"
+source = "git+https://github.com/NVIDIA/OpenShell?tag=v0.1.8-pre.3#53b8eec29cadab70e11be88776cf14a0fc6a7fdd"
 dependencies = [
  "aws-lc-rs",
  "jsonwebtoken",
@@ -2164,7 +2164,7 @@ dependencies = [
 [[package]]
 name = "openshell-extension-core"
 version = "0.0.0"
-source = "git+https://github.com/NVIDIA/OpenShell?tag=v0.1.7#5d25211b25a8fc887e8d5c606d57d6ab22f1d76c"
+source = "git+https://github.com/NVIDIA/OpenShell?tag=v0.1.8-pre.3#53b8eec29cadab70e11be88776cf14a0fc6a7fdd"
 dependencies = [
  "hyper-util",
  "serde",
@@ -2177,7 +2177,7 @@ dependencies = [
 [[package]]
 name = "openshell-policy"
 version = "0.0.0"
-source = "git+https://github.com/NVIDIA/OpenShell?tag=v0.1.7#5d25211b25a8fc887e8d5c606d57d6ab22f1d76c"
+source = "git+https://github.com/NVIDIA/OpenShell?tag=v0.1.8-pre.3#53b8eec29cadab70e11be88776cf14a0fc6a7fdd"
 dependencies = [
  "hickory-proto",
  "miette",
@@ -2191,7 +2191,7 @@ dependencies = [
 [[package]]
 name = "openshell-policy-schema"
 version = "0.0.0"
-source = "git+https://github.com/NVIDIA/OpenShell?tag=v0.1.7#5d25211b25a8fc887e8d5c606d57d6ab22f1d76c"
+source = "git+https://github.com/NVIDIA/OpenShell?tag=v0.1.8-pre.3#53b8eec29cadab70e11be88776cf14a0fc6a7fdd"
 dependencies = [
  "miette",
  "noyalib",
diff --git a/Cargo.toml b/Cargo.toml
index c107c3b..2c1a339 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -10,10 +10,10 @@ repository = "https://github.com/ilanh/openshell-annotate"
 authors = ["Ilan Harel"]
 
 [dependencies]
-# Pinned to the OpenShell v0.1.7 tag; Cargo.lock records the exact commit.
-openshell-policy-schema = { git = "https://github.com/NVIDIA/OpenShell", tag = "v0.1.7" }
+# Pinned to the OpenShell v0.1.8-pre.3 tag; Cargo.lock records the exact commit.
+openshell-policy-schema = { git = "https://github.com/NVIDIA/OpenShell", tag = "v0.1.8-pre.3" }
 # Same tag. Schema parsing accepts policies the gateway later rejects; this crate is that validator.
-openshell-policy = { git = "https://github.com/NVIDIA/OpenShell", tag = "v0.1.7" }
+openshell-policy = { git = "https://github.com/NVIDIA/OpenShell", tag = "v0.1.8-pre.3" }
 anyhow = "1"
 clap = { version = "4", features = ["derive"] }
 ignore = "0.4"