diff --git a/WORKSPACE.bazel b/WORKSPACE.bazel
index 0036dd33..f5ec1856 100644
--- a/WORKSPACE.bazel
+++ b/WORKSPACE.bazel
@@ -23,9 +23,9 @@ load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
 #
 http_archive(
   name = "com_google_googleapis",
-  strip_prefix = "googleapis-7976ffadc0f21ee9149708c0c97ef000e15de1eb",
-  urls = ["https://github.com/googleapis/googleapis/archive/7976ffadc0f21ee9149708c0c97ef000e15de1eb.zip"],
-  sha256 = "935fb7ebbc65f43e293fac7240471c24d9d52249f5c8bf09c0d04327b2191053"
+  strip_prefix = "googleapis-a2bef5d1953f760d872398715f9c299b0ca5683f",
+  urls = ["https://github.com/googleapis/googleapis/archive/a2bef5d1953f760d872398715f9c299b0ca5683f.zip"],
+  sha256 = "e4aacc4c418c2f9197ad30eb05218f04c5c8d7b138118aa5feaca2d5f9d55b4f"
 )
 load("@com_google_googleapis//:repository_rules.bzl", "switched_rules_by_language")
 switched_rules_by_language(name = "com_google_googleapis_imports", grpc = True)
@@ -35,18 +35,18 @@ switched_rules_by_language(name = "com_google_googleapis_imports", grpc = True)
 #
 http_archive(
   name = "com_google_protobuf",
-  sha256 = "ddd0f5271f31b549efc74eb39061e142132653d5d043071fcec265bd571e73c4",
-  urls = ["https://github.com/protocolbuffers/protobuf/archive/v25.2.zip"],
-  strip_prefix = "protobuf-25.2",
+  sha256 = "5b2ff0f72e85dc1350b7bb1b4ea94d7e92e297f7a58b630e46fa6b430b5b253b",
+  urls = ["https://github.com/protocolbuffers/protobuf/archive/v28.3.zip"],
+  strip_prefix = "protobuf-28.3",
 )
 load("@com_google_protobuf//:protobuf_deps.bzl", "protobuf_deps")
 protobuf_deps()
 
 http_archive(
     name = "bazel_features",
-    sha256 = "5d7e4eb0bb17aee392143cd667b67d9044c270a9345776a5e5a3cccbc44aa4b3",
-    strip_prefix = "bazel_features-1.13.0",
-    url = "https://github.com/bazel-contrib/bazel_features/releases/download/v1.13.0/bazel_features-v1.13.0.tar.gz",
+    sha256 = "c2596994cf63513bd44180411a4ac3ae95d32bf59148fcb6087a4642b3ffef11",
+    strip_prefix = "bazel_features-1.20.0",
+    url = "https://github.com/bazel-contrib/bazel_features/releases/download/v1.20.0/bazel_features-v1.20.0.tar.gz",
 )
 load("@bazel_features//:deps.bzl", "bazel_features_deps")
 bazel_features_deps()
@@ -56,12 +56,12 @@ bazel_features_deps()
 #
 http_archive(
     name = "rules_proto",
-    sha256 = "6fb6767d1bef535310547e03247f7518b03487740c11b6c6adb7952033fe1295",
+    sha256 = "0e5c64a2599a6e26c6a03d6162242d231ecc0de219534c38cb4402171def21e8",
     # Using a release candidate because the latest stable release is too old for
     # our needs, and we want to stay closer to the latest without pinning to a
     # specific commit.
-    strip_prefix = "rules_proto-6.0.2",
-    url = "https://github.com/bazelbuild/rules_proto/releases/download/6.0.2/rules_proto-6.0.2.tar.gz",
+    strip_prefix = "rules_proto-7.0.2",
+    url = "https://github.com/bazelbuild/rules_proto/releases/download/7.0.2/rules_proto-7.0.2.tar.gz",
 )
 
 load("@rules_proto//proto:repositories.bzl", "rules_proto_dependencies","rules_proto_toolchains")