diff --git a/ci-conda.Dockerfile b/ci-conda.Dockerfile
index 4b0c7d4..3ec9c94 100644
--- a/ci-conda.Dockerfile
+++ b/ci-conda.Dockerfile
@@ -75,6 +75,10 @@ umask 002
 # xref: https://github.com/conda-forge/libxml2-feedstock/issues/145
 echo 'libxml2<2.14.0' >> /opt/conda/conda-meta/pinned
 
+# Temporary workaround for deadlocks in unpacking libcurl
+# we hardcode this to match the versions in the upstream `miniforge3` image
+echo 'libcurl==8.14.1' >> /opt/conda/conda-meta/pinned
+
 # update everything before other environment changes, to ensure mixing
 # an older conda with newer packages still works well
 rapids-mamba-retry update --all -y -n base
diff --git a/versions.yaml b/versions.yaml
index 07ea681..366164d 100644
--- a/versions.yaml
+++ b/versions.yaml
@@ -13,4 +13,4 @@ YQ_VER: 4.48.1
 # renovate: datasource=github-releases depName=aws/aws-cli
 AWS_CLI_VER: 2.28.1
 # renovate: datasource=docker depName=condaforge/miniforge3 versioning=docker
-MINIFORGE_VER: 25.9.1-0
+MINIFORGE_VER: 25.3.1-0