diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index 6eddbe2..872c697 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -31,7 +31,7 @@ jobs:
         with:
           fetch-depth: 0
 
-      - uses: hynek/build-and-inspect-python-package@v2
+      - uses: hynek/build-and-inspect-python-package@2abe76da66d0a6a4a227101f9348ee855797cfa5 # v3.0.1
 
   publish-testpypi:
     needs: [dist]
diff --git a/.readthedocs.yaml b/.readthedocs.yaml
index 4a97deb..9543ea6 100644
--- a/.readthedocs.yaml
+++ b/.readthedocs.yaml
@@ -9,9 +9,10 @@ build:
     python: "3.13"
   jobs:
     install:
-      - asdf plugin add uv
-      - asdf install uv latest
-      - asdf global uv latest
+      # Install uv from PyPI, pinned. The asdf recipe from the Read the Docs
+      # docs resolves "latest" via a GitHub API scrape that intermittently
+      # fails on RTD's shared builders, and floats the uv version besides.
+      - pip install uv==0.12.3
       - uv sync --group docs
     build:
       html: