diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index fdbd367..a8ff22a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -26,18 +26,17 @@ jobs:
           # and does not upgrade.
           pip install "jax==0.11.0"
       - name: Install latex dependencies
+        timeout-minutes: 30
         run: |
-          sudo apt-get -qq update
-          sudo apt-get install -y     \
-            texlive-latex-recommended \
-            texlive-latex-extra       \
-            texlive-fonts-recommended \
-            texlive-fonts-extra       \
-            texlive-xetex             \
-            latexmk                   \
-            xindy                     \
-            dvipng                    \
-            cm-super
+          # Retried with per-command timeouts (timeout inside sudo, so the kill reaches
+          # apt-get and the dpkg lock is released): a stalled Ubuntu mirror otherwise
+          # hangs this step for hours (two 358-minute hangs on 2026-08-18).
+          pkgs="texlive-latex-recommended texlive-latex-extra texlive-fonts-recommended texlive-fonts-extra texlive-xetex latexmk xindy dvipng cm-super"
+          for attempt in 1 2; do
+            sudo timeout -k 30s 2m apt-get -qq update && sudo timeout -k 30s 12m apt-get install -y $pkgs && break
+            if [ "$attempt" = 2 ]; then echo "apt-get failed after 2 attempts"; exit 1; fi
+            echo "apt-get attempt $attempt failed; retrying in 30s"; sleep 30
+          done
       - name: Display Conda Environment Versions
         shell: bash -l {0}
         run: conda list
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 0c7667a..f05f137 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -31,18 +31,17 @@ jobs:
           # and does not upgrade.
           pip install "jax==0.11.0"
       - name: Install latex dependencies
+        timeout-minutes: 30
         run: |
-          sudo apt-get -qq update
-          sudo apt-get install -y     \
-            texlive-latex-recommended \
-            texlive-latex-extra       \
-            texlive-fonts-recommended \
-            texlive-fonts-extra       \
-            texlive-xetex             \
-            latexmk                   \
-            xindy                     \
-            dvipng                    \
-            cm-super
+          # Retried with per-command timeouts (timeout inside sudo, so the kill reaches
+          # apt-get and the dpkg lock is released): a stalled Ubuntu mirror otherwise
+          # hangs this step for hours (two 358-minute hangs on 2026-08-18).
+          pkgs="texlive-latex-recommended texlive-latex-extra texlive-fonts-recommended texlive-fonts-extra texlive-xetex latexmk xindy dvipng cm-super"
+          for attempt in 1 2; do
+            sudo timeout -k 30s 2m apt-get -qq update && sudo timeout -k 30s 12m apt-get install -y $pkgs && break
+            if [ "$attempt" = 2 ]; then echo "apt-get failed after 2 attempts"; exit 1; fi
+            echo "apt-get attempt $attempt failed; retrying in 30s"; sleep 30
+          done
       - name: Display Conda Environment Versions
         shell: bash -l {0}
         run: conda list