diff --git a/MODULE.bazel b/MODULE.bazel
index c2a1734e..4db53135 100644
--- a/MODULE.bazel
+++ b/MODULE.bazel
@@ -39,7 +39,7 @@ local_path_override(
     path = "modules/c",
 )
 
-bazel_dep(name = "protobuf", version = "27.1")
+bazel_dep(name = "protobuf", version = "27.5")
 
 # C++
 bazel_dep(name = "rules_proto_grpc_cpp", version = "0.0.0.rpg.version.placeholder")
@@ -48,7 +48,7 @@ local_path_override(
     path = "modules/cpp",
 )
 
-bazel_dep(name = "toolchains_protoc", version = "0.3.1")
+bazel_dep(name = "toolchains_protoc", version = "0.3.5")
 
 # Prevent version skew by matching protoc version to protobuf version, as C++ is the only lang that
 # has no cross-version runtime guarantee:
diff --git a/modules/c/MODULE.bazel b/modules/c/MODULE.bazel
index 0e11a262..2a2036f8 100644
--- a/modules/c/MODULE.bazel
+++ b/modules/c/MODULE.bazel
@@ -4,6 +4,6 @@ module(
     compatibility_level = 1,
 )
 
-bazel_dep(name = "protobuf", version = "27.1")
+bazel_dep(name = "protobuf", version = "27.5")
 bazel_dep(name = "rules_cc", version = "0.0.13")
 bazel_dep(name = "rules_proto_grpc", version = "0.0.0.rpg.version.placeholder")
diff --git a/modules/core/MODULE.bazel b/modules/core/MODULE.bazel
index ff27d8cf..eb94a261 100644
--- a/modules/core/MODULE.bazel
+++ b/modules/core/MODULE.bazel
@@ -7,4 +7,4 @@ module(
 bazel_dep(name = "bazel_skylib", version = "1.7.1")
 bazel_dep(name = "rules_cc", version = "0.0.13")  # For fixer
 bazel_dep(name = "rules_proto", version = "6.0.2")
-bazel_dep(name = "toolchains_protoc", version = "0.3.1")
+bazel_dep(name = "toolchains_protoc", version = "0.3.5")
diff --git a/modules/cpp/MODULE.bazel b/modules/cpp/MODULE.bazel
index 33ddbcc6..def7e6af 100644
--- a/modules/cpp/MODULE.bazel
+++ b/modules/cpp/MODULE.bazel
@@ -5,6 +5,6 @@ module(
 )
 
 bazel_dep(name = "grpc", version = "1.65.0")
-bazel_dep(name = "protobuf", version = "27.1")
+bazel_dep(name = "protobuf", version = "27.5")
 bazel_dep(name = "rules_cc", version = "0.0.13")
 bazel_dep(name = "rules_proto_grpc", version = "0.0.0.rpg.version.placeholder")
diff --git a/modules/example_protos/MODULE.bazel b/modules/example_protos/MODULE.bazel
index ee653d26..48533ccc 100644
--- a/modules/example_protos/MODULE.bazel
+++ b/modules/example_protos/MODULE.bazel
@@ -4,5 +4,5 @@ module(
     compatibility_level = 1,
 )
 
-bazel_dep(name = "protobuf", version = "27.1")
+bazel_dep(name = "protobuf", version = "27.5")
 bazel_dep(name = "rules_proto", version = "6.0.2")
diff --git a/modules/objc/MODULE.bazel b/modules/objc/MODULE.bazel
index b3787ea6..d87d5d88 100644
--- a/modules/objc/MODULE.bazel
+++ b/modules/objc/MODULE.bazel
@@ -6,6 +6,6 @@ module(
 
 bazel_dep(name = "apple_support", version = "1.17.1")
 bazel_dep(name = "grpc", version = "1.65.0")
-bazel_dep(name = "protobuf", version = "27.1")
+bazel_dep(name = "protobuf", version = "27.5")
 bazel_dep(name = "rules_cc", version = "0.0.13")
 bazel_dep(name = "rules_proto_grpc", version = "0.0.0.rpg.version.placeholder")
diff --git a/modules/python/requirements.in b/modules/python/requirements.in
index 04c2a284..5677c247 100644
--- a/modules/python/requirements.in
+++ b/modules/python/requirements.in
@@ -1,3 +1,3 @@
 grpcio==1.65.4  # TODO: remove once pulling grpc from BCR @grpc works
 grpclib==0.4.7
-protobuf==5.27.2
+protobuf==5.29.1
diff --git a/modules/python/requirements.txt b/modules/python/requirements.txt
index 3914eda9..d77cd0b1 100644
--- a/modules/python/requirements.txt
+++ b/modules/python/requirements.txt
@@ -161,16 +161,16 @@ multidict==6.1.0 \
     --hash=sha256:f90c822a402cb865e396a504f9fc8173ef34212a342d92e362ca498cad308e28 \
     --hash=sha256:ff3827aef427c89a25cc96ded1759271a93603aba9fb977a6d264648ebf989db
     # via grpclib
-protobuf==5.27.2 \
-    --hash=sha256:0e341109c609749d501986b835f667c6e1e24531096cff9d34ae411595e26505 \
-    --hash=sha256:176c12b1f1c880bf7a76d9f7c75822b6a2bc3db2d28baa4d300e8ce4cde7409b \
-    --hash=sha256:354d84fac2b0d76062e9b3221f4abbbacdfd2a4d8af36bab0474f3a0bb30ab38 \
-    --hash=sha256:4fadd8d83e1992eed0248bc50a4a6361dc31bcccc84388c54c86e530b7f58863 \
-    --hash=sha256:54330f07e4949d09614707c48b06d1a22f8ffb5763c159efd5c0928326a91470 \
-    --hash=sha256:610e700f02469c4a997e58e328cac6f305f649826853813177e6290416e846c6 \
-    --hash=sha256:7fc3add9e6003e026da5fc9e59b131b8f22b428b991ccd53e2af8071687b4fce \
-    --hash=sha256:9e8f199bf7f97bd7ecebffcae45ebf9527603549b2b562df0fbc6d4d688f14ca \
-    --hash=sha256:a109916aaac42bff84702fb5187f3edadbc7c97fc2c99c5ff81dd15dcce0d1e5 \
-    --hash=sha256:b848dbe1d57ed7c191dfc4ea64b8b004a3f9ece4bf4d0d80a367b76df20bf36e \
-    --hash=sha256:f3ecdef226b9af856075f28227ff2c90ce3a594d092c39bee5513573f25e2714
+protobuf==5.29.1 \
+    --hash=sha256:012ce28d862ff417fd629285aca5d9772807f15ceb1a0dbd15b88f58c776c98c \
+    --hash=sha256:027fbcc48cea65a6b17028510fdd054147057fa78f4772eb547b9274e5219331 \
+    --hash=sha256:1fc55267f086dd4050d18ef839d7bd69300d0d08c2a53ca7df3920cc271a3c34 \
+    --hash=sha256:22c1f539024241ee545cbcb00ee160ad1877975690b16656ff87dde107b5f110 \
+    --hash=sha256:32600ddb9c2a53dedc25b8581ea0f1fd8ea04956373c0c07577ce58d312522e0 \
+    --hash=sha256:50879eb0eb1246e3a5eabbbe566b44b10348939b7cc1b267567e8c3d07213853 \
+    --hash=sha256:5a41deccfa5e745cef5c65a560c76ec0ed8e70908a67cc8f4da5fce588b50d57 \
+    --hash=sha256:683be02ca21a6ffe80db6dd02c0b5b2892322c59ca57fd6c872d652cb80549cb \
+    --hash=sha256:8ee1461b3af56145aca2800e6a3e2f928108c749ba8feccc6f5dd0062c410c0d \
+    --hash=sha256:b5ba1d0e4c8a40ae0496d0e2ecfdbb82e1776928a205106d14ad6985a09ec155 \
+    --hash=sha256:d473655e29c0c4bbf8b69e9a8fb54645bc289dead6d753b952e7aa660254ae18
     # via -r requirements.in
diff --git a/test_workspaces/common_cpp_library/MODULE.bazel b/test_workspaces/common_cpp_library/MODULE.bazel
index 5e801da3..64f4d78f 100644
--- a/test_workspaces/common_cpp_library/MODULE.bazel
+++ b/test_workspaces/common_cpp_library/MODULE.bazel
@@ -1,4 +1,4 @@
-bazel_dep(name = "protobuf", version = "27.1")
+bazel_dep(name = "protobuf", version = "27.5")
 bazel_dep(name = "rules_cc", version = "0.0.13")
 bazel_dep(name = "rules_proto", version = "6.0.2")
 bazel_dep(name = "rules_proto_grpc_cpp", version = "0.0.0.rpg.version.placeholder")
diff --git a/test_workspaces/exclusions/MODULE.bazel b/test_workspaces/exclusions/MODULE.bazel
index dda26679..3c46cdb3 100644
--- a/test_workspaces/exclusions/MODULE.bazel
+++ b/test_workspaces/exclusions/MODULE.bazel
@@ -1,4 +1,4 @@
-bazel_dep(name = "protobuf", version = "27.1")
+bazel_dep(name = "protobuf", version = "27.5")
 bazel_dep(name = "rules_proto", version = "6.0.2")
 bazel_dep(name = "rules_proto_grpc_python", version = "0.0.0.rpg.version.placeholder")
 bazel_dep(name = "rules_python", version = "0.37.2")