diff --git a/pyproject.toml b/pyproject.toml
index 18a250b..ebf0310 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -30,7 +30,7 @@ dependencies = [
     # AAASM-1654 (PR-E): OpControlSubscriber consumes PolicyService.OpControlStream
     # via gRPC. Held to grpcio's modern stable line.
     "grpcio>=1.66,<2",
-    "protobuf>=5,<7",
+    "protobuf>=5,<8",
 ]
 
 [project.scripts]
diff --git a/uv.lock b/uv.lock
index 30158ac..4f7942b 100644
--- a/uv.lock
+++ b/uv.lock
@@ -46,7 +46,7 @@ pre-commit-ci = [
 requires-dist = [
     { name = "grpcio", specifier = ">=1.66,<2" },
     { name = "httpx", specifier = ">=0.27.0,<1.0.0" },
-    { name = "protobuf", specifier = ">=5,<7" },
+    { name = "protobuf", specifier = ">=5,<8" },
     { name = "pydantic", specifier = ">=2.0.0,<3.0.0" },
     { name = "typing-extensions", specifier = ">=4.0.0" },
 ]