diff --git a/.cspell.json b/.cspell.json
index e05f2b90..f9587cf0 100644
--- a/.cspell.json
+++ b/.cspell.json
@@ -25,6 +25,7 @@
     "**/.cspell.json",
     "*.ico",
     "*.svg",
+    ".constraints/*.txt",
     ".editorconfig",
     ".envrc",
     ".gitattributes",
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 8926ef6a..1eb66a85 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -1,5 +1,5 @@
 ci:
-  autoupdate_commit_msg: "MAINT: autoupdate pre-commit hooks"
+  autoupdate_commit_msg: "MAINT: update pip constraints and pre-commit"
   autoupdate_schedule: quarterly
   skip:
     - check-jsonschema
diff --git a/.readthedocs.yml b/.readthedocs.yml
index 2eb1a00d..b6844a63 100644
--- a/.readthedocs.yml
+++ b/.readthedocs.yml
@@ -17,4 +17,4 @@ build:
   jobs:
     post_install:
       - python -m pip install 'uv>=0.2.0'
-      - python -m uv pip install -e .[doc]
+      - python -m uv pip install -c .constraints/py3.12.txt -e .[doc]
diff --git a/.vscode/settings.json b/.vscode/settings.json
index 2c0f4367..d0316167 100644
--- a/.vscode/settings.json
+++ b/.vscode/settings.json
@@ -31,6 +31,7 @@
     "\u03c3": true
   },
   "files.associations": {
+    "**/.constraints/py*.txt": "pip-requirements",
     "**/pixi.lock": "yaml"
   },
   "files.watcherExclude": {
diff --git a/environment.yml b/environment.yml
index 8b03e206..7e2206e6 100644
--- a/environment.yml
+++ b/environment.yml
@@ -6,6 +6,6 @@ dependencies:
   - pip
   - python==3.12.*
   - pip:
-      - -e .[dev]
+      - -c .constraints/py3.12.txt -e .[dev]
 variables:
   PYTHONHASHSEED: 0