The upstream maintainer has commented on the issue: the root of the issue seems to be some unfortunate interaction with the microtype and zref packages. Not loading the microtype package (which is not used anyway) will fix the issue. The maintainer promised to do this for some upcoming bugfix release.
Attachment:
signature.asc
Description: OpenPGP digital signature