diff --git a/MODULE.bazel b/MODULE.bazel
index c2a1734e..bb216401 100644
--- a/MODULE.bazel
+++ b/MODULE.bazel
@@ -39,7 +39,7 @@ local_path_override(
     path = "modules/c",
 )
 
-bazel_dep(name = "protobuf", version = "27.1")
+bazel_dep(name = "protobuf", version = "27.5")
 
 # C++
 bazel_dep(name = "rules_proto_grpc_cpp", version = "0.0.0.rpg.version.placeholder")
@@ -48,7 +48,7 @@ local_path_override(
     path = "modules/cpp",
 )
 
-bazel_dep(name = "toolchains_protoc", version = "0.3.1")
+bazel_dep(name = "toolchains_protoc", version = "0.3.4")
 
 # Prevent version skew by matching protoc version to protobuf version, as C++ is the only lang that
 # has no cross-version runtime guarantee:
diff --git a/modules/c/MODULE.bazel b/modules/c/MODULE.bazel
index 0e11a262..2a2036f8 100644
--- a/modules/c/MODULE.bazel
+++ b/modules/c/MODULE.bazel
@@ -4,6 +4,6 @@ module(
     compatibility_level = 1,
 )
 
-bazel_dep(name = "protobuf", version = "27.1")
+bazel_dep(name = "protobuf", version = "27.5")
 bazel_dep(name = "rules_cc", version = "0.0.13")
 bazel_dep(name = "rules_proto_grpc", version = "0.0.0.rpg.version.placeholder")
diff --git a/modules/core/MODULE.bazel b/modules/core/MODULE.bazel
index ff27d8cf..e7d0cb63 100644
--- a/modules/core/MODULE.bazel
+++ b/modules/core/MODULE.bazel
@@ -7,4 +7,4 @@ module(
 bazel_dep(name = "bazel_skylib", version = "1.7.1")
 bazel_dep(name = "rules_cc", version = "0.0.13")  # For fixer
 bazel_dep(name = "rules_proto", version = "6.0.2")
-bazel_dep(name = "toolchains_protoc", version = "0.3.1")
+bazel_dep(name = "toolchains_protoc", version = "0.3.4")
diff --git a/modules/cpp/MODULE.bazel b/modules/cpp/MODULE.bazel
index 33ddbcc6..def7e6af 100644
--- a/modules/cpp/MODULE.bazel
+++ b/modules/cpp/MODULE.bazel
@@ -5,6 +5,6 @@ module(
 )
 
 bazel_dep(name = "grpc", version = "1.65.0")
-bazel_dep(name = "protobuf", version = "27.1")
+bazel_dep(name = "protobuf", version = "27.5")
 bazel_dep(name = "rules_cc", version = "0.0.13")
 bazel_dep(name = "rules_proto_grpc", version = "0.0.0.rpg.version.placeholder")
diff --git a/modules/example_protos/MODULE.bazel b/modules/example_protos/MODULE.bazel
index ee653d26..48533ccc 100644
--- a/modules/example_protos/MODULE.bazel
+++ b/modules/example_protos/MODULE.bazel
@@ -4,5 +4,5 @@ module(
     compatibility_level = 1,
 )
 
-bazel_dep(name = "protobuf", version = "27.1")
+bazel_dep(name = "protobuf", version = "27.5")
 bazel_dep(name = "rules_proto", version = "6.0.2")
diff --git a/modules/objc/MODULE.bazel b/modules/objc/MODULE.bazel
index b3787ea6..d87d5d88 100644
--- a/modules/objc/MODULE.bazel
+++ b/modules/objc/MODULE.bazel
@@ -6,6 +6,6 @@ module(
 
 bazel_dep(name = "apple_support", version = "1.17.1")
 bazel_dep(name = "grpc", version = "1.65.0")
-bazel_dep(name = "protobuf", version = "27.1")
+bazel_dep(name = "protobuf", version = "27.5")
 bazel_dep(name = "rules_cc", version = "0.0.13")
 bazel_dep(name = "rules_proto_grpc", version = "0.0.0.rpg.version.placeholder")
diff --git a/modules/python/requirements.in b/modules/python/requirements.in
index 04c2a284..024ca0e0 100644
--- a/modules/python/requirements.in
+++ b/modules/python/requirements.in
@@ -1,3 +1,3 @@
 grpcio==1.65.4  # TODO: remove once pulling grpc from BCR @grpc works
 grpclib==0.4.7
-protobuf==5.27.2
+protobuf==5.29.0
diff --git a/modules/python/requirements.txt b/modules/python/requirements.txt
index 3914eda9..8fa89a3b 100644
--- a/modules/python/requirements.txt
+++ b/modules/python/requirements.txt
@@ -161,16 +161,16 @@ multidict==6.1.0 \
     --hash=sha256:f90c822a402cb865e396a504f9fc8173ef34212a342d92e362ca498cad308e28 \
     --hash=sha256:ff3827aef427c89a25cc96ded1759271a93603aba9fb977a6d264648ebf989db
     # via grpclib
-protobuf==5.27.2 \
-    --hash=sha256:0e341109c609749d501986b835f667c6e1e24531096cff9d34ae411595e26505 \
-    --hash=sha256:176c12b1f1c880bf7a76d9f7c75822b6a2bc3db2d28baa4d300e8ce4cde7409b \
-    --hash=sha256:354d84fac2b0d76062e9b3221f4abbbacdfd2a4d8af36bab0474f3a0bb30ab38 \
-    --hash=sha256:4fadd8d83e1992eed0248bc50a4a6361dc31bcccc84388c54c86e530b7f58863 \
-    --hash=sha256:54330f07e4949d09614707c48b06d1a22f8ffb5763c159efd5c0928326a91470 \
-    --hash=sha256:610e700f02469c4a997e58e328cac6f305f649826853813177e6290416e846c6 \
-    --hash=sha256:7fc3add9e6003e026da5fc9e59b131b8f22b428b991ccd53e2af8071687b4fce \
-    --hash=sha256:9e8f199bf7f97bd7ecebffcae45ebf9527603549b2b562df0fbc6d4d688f14ca \
-    --hash=sha256:a109916aaac42bff84702fb5187f3edadbc7c97fc2c99c5ff81dd15dcce0d1e5 \
-    --hash=sha256:b848dbe1d57ed7c191dfc4ea64b8b004a3f9ece4bf4d0d80a367b76df20bf36e \
-    --hash=sha256:f3ecdef226b9af856075f28227ff2c90ce3a594d092c39bee5513573f25e2714
+protobuf==5.29.0 \
+    --hash=sha256:0cd67a1e5c2d88930aa767f702773b2d054e29957432d7c6a18f8be02a07719a \
+    --hash=sha256:0d10091d6d03537c3f902279fcf11e95372bdd36a79556311da0487455791b20 \
+    --hash=sha256:17d128eebbd5d8aee80300aed7a43a48a25170af3337f6f1333d1fac2c6839ac \
+    --hash=sha256:34a90cf30c908f47f40ebea7811f743d360e202b6f10d40c02529ebd84afc069 \
+    --hash=sha256:445a0c02483869ed8513a585d80020d012c6dc60075f96fa0563a724987b1001 \
+    --hash=sha256:6c3009e22717c6cc9e6594bb11ef9f15f669b19957ad4087214d69e08a213368 \
+    --hash=sha256:85286a47caf63b34fa92fdc1fd98b649a8895db595cfa746c5286eeae890a0b1 \
+    --hash=sha256:88c4af76a73183e21061881360240c0cdd3c39d263b4e8fb570aaf83348d608f \
+    --hash=sha256:c931c61d0cc143a2e756b1e7f8197a508de5365efd40f83c907a9febf36e6b43 \
+    --hash=sha256:e467f81fdd12ded9655cea3e9b83dc319d93b394ce810b556fb0f421d8613e86 \
+    --hash=sha256:ea7fb379b257911c8c020688d455e8f74efd2f734b72dc1ea4b4d7e9fd1326f2
     # via -r requirements.in
diff --git a/test_workspaces/common_cpp_library/MODULE.bazel b/test_workspaces/common_cpp_library/MODULE.bazel
index 5e801da3..64f4d78f 100644
--- a/test_workspaces/common_cpp_library/MODULE.bazel
+++ b/test_workspaces/common_cpp_library/MODULE.bazel
@@ -1,4 +1,4 @@
-bazel_dep(name = "protobuf", version = "27.1")
+bazel_dep(name = "protobuf", version = "27.5")
 bazel_dep(name = "rules_cc", version = "0.0.13")
 bazel_dep(name = "rules_proto", version = "6.0.2")
 bazel_dep(name = "rules_proto_grpc_cpp", version = "0.0.0.rpg.version.placeholder")
diff --git a/test_workspaces/exclusions/MODULE.bazel b/test_workspaces/exclusions/MODULE.bazel
index dda26679..3c46cdb3 100644
--- a/test_workspaces/exclusions/MODULE.bazel
+++ b/test_workspaces/exclusions/MODULE.bazel
@@ -1,4 +1,4 @@
-bazel_dep(name = "protobuf", version = "27.1")
+bazel_dep(name = "protobuf", version = "27.5")
 bazel_dep(name = "rules_proto", version = "6.0.2")
 bazel_dep(name = "rules_proto_grpc_python", version = "0.0.0.rpg.version.placeholder")
 bazel_dep(name = "rules_python", version = "0.37.2")