diff --git a/.github/workflows/build-linux.yml b/.github/workflows/build-linux.yml
index cb26e2ca..11a4f125 100644
--- a/.github/workflows/build-linux.yml
+++ b/.github/workflows/build-linux.yml
@@ -37,7 +37,6 @@ jobs:
       - name: Verify binary
         run: |
           VERSION=${{ steps.version.outputs.version }}
-          chmod +x releases/${VERSION}/voxtype-${VERSION}-linux-x86_64-avx2
           releases/${VERSION}/voxtype-${VERSION}-linux-x86_64-avx2 --version
 
       - name: Upload artifact
@@ -71,7 +70,6 @@ jobs:
       - name: Verify binary
         run: |
           VERSION=${{ steps.version.outputs.version }}
-          chmod +x releases/${VERSION}/voxtype-${VERSION}-linux-x86_64-vulkan
           releases/${VERSION}/voxtype-${VERSION}-linux-x86_64-vulkan --version
 
       - name: Upload artifact
@@ -105,7 +103,6 @@ jobs:
       - name: Verify binary
         run: |
           VERSION=${{ steps.version.outputs.version }}
-          chmod +x releases/${VERSION}/voxtype-${VERSION}-linux-x86_64-parakeet-avx2
           releases/${VERSION}/voxtype-${VERSION}-linux-x86_64-parakeet-avx2 --version
 
       - name: Upload artifact
@@ -143,13 +140,14 @@ jobs:
 
       - name: Install Rust
         if: steps.check-avx512.outputs.supported == 'true'
-        uses: dtolnay/rust-action@stable
+        uses: dtolnay/rust-toolchain@stable
 
       - name: Install dependencies
         if: steps.check-avx512.outputs.supported == 'true'
         run: |
           sudo apt-get update
-          sudo apt-get install -y libasound2-dev clang cmake
+          sudo apt-get install -y libasound2-dev libclang-dev cmake \
+            libgtk-3-dev libglib2.0-dev libx11-dev libxi-dev libxtst-dev
 
       - name: Build AVX-512 binary
         if: steps.check-avx512.outputs.supported == 'true'
@@ -203,13 +201,15 @@ jobs:
 
       - name: Install Rust
         if: steps.check-avx512.outputs.supported == 'true'
-        uses: dtolnay/rust-action@stable
+        uses: dtolnay/rust-toolchain@stable
 
       - name: Install dependencies
         if: steps.check-avx512.outputs.supported == 'true'
         run: |
           sudo apt-get update
-          sudo apt-get install -y libasound2-dev clang cmake
+          sudo apt-get install -y libasound2-dev libclang-dev cmake \
+            libgtk-3-dev libglib2.0-dev libx11-dev libxi-dev libxtst-dev \
+            libssl-dev protobuf-compiler libprotobuf-dev
 
       - name: Build Parakeet AVX-512 binary
         if: steps.check-avx512.outputs.supported == 'true'
diff --git a/.github/workflows/build-macos.yml b/.github/workflows/build-macos.yml
index 51ae0a1b..6a595ad3 100644
--- a/.github/workflows/build-macos.yml
+++ b/.github/workflows/build-macos.yml
@@ -18,7 +18,7 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Install Rust
-        uses: dtolnay/rust-action@stable
+        uses: dtolnay/rust-toolchain@stable
 
       - name: Install Rust targets
         run: |
diff --git a/.github/workflows/test-packages.yml b/.github/workflows/test-packages.yml
index 854183cd..248ddf32 100644
--- a/.github/workflows/test-packages.yml
+++ b/.github/workflows/test-packages.yml
@@ -43,7 +43,12 @@ jobs:
             cmake \
             ruby \
             ruby-dev \
-            build-essential
+            build-essential \
+            libgtk-3-dev \
+            libglib2.0-dev \
+            libx11-dev \
+            libxi-dev \
+            libxtst-dev
           sudo gem install fpm
 
       - name: Cache cargo registry
diff --git a/Dockerfile.build b/Dockerfile.build
index c727fa1a..e10bf34c 100644
--- a/Dockerfile.build
+++ b/Dockerfile.build
@@ -80,5 +80,6 @@ RUN echo "=== Verifying AVX2 binary ===" \
 # Output stage - copy binary to /output volume
 CMD mkdir -p /output \
     && cp /tmp/voxtype-avx2 /output/voxtype-${VERSION}-linux-x86_64-avx2 \
+    && chmod 755 /output/voxtype-${VERSION}-linux-x86_64-avx2 \
     && echo "Binary copied to /output:" \
     && ls -la /output/voxtype-*
diff --git a/Dockerfile.parakeet b/Dockerfile.parakeet
index 11baf34b..d1f49d61 100644
--- a/Dockerfile.parakeet
+++ b/Dockerfile.parakeet
@@ -89,5 +89,6 @@ RUN echo "=== Verifying Parakeet AVX2 binary ===" \
 # Output stage
 CMD mkdir -p /output \
     && cp /tmp/voxtype-parakeet-avx2 /output/voxtype-${VERSION}-linux-x86_64-parakeet-avx2 \
+    && chmod 755 /output/voxtype-${VERSION}-linux-x86_64-parakeet-avx2 \
     && echo "Binary copied to /output:" \
     && ls -la /output/voxtype-*
diff --git a/Dockerfile.vulkan b/Dockerfile.vulkan
index f76d2531..44257e5e 100644
--- a/Dockerfile.vulkan
+++ b/Dockerfile.vulkan
@@ -87,5 +87,6 @@ RUN echo "=== Verifying Vulkan binary ===" \
 # Output stage - copy binary to /output volume
 CMD mkdir -p /output \
     && cp /tmp/voxtype-vulkan /output/voxtype-${VERSION}-linux-x86_64-vulkan \
+    && chmod 755 /output/voxtype-${VERSION}-linux-x86_64-vulkan \
     && echo "Binary copied to /output:" \
     && ls -la /output/voxtype-*-vulkan