diff --git a/setup.py b/setup.py
index 950d210..92759dc 100644
--- a/setup.py
+++ b/setup.py
@@ -30,7 +30,8 @@
     # https://github.com/googleapis/google-cloud-python/issues/10566
     "google-api-core[grpc] >= 1.31.5, <3.0.0dev,!=2.0.*,!=2.1.*,!=2.2.*,!=2.3.0",
     "grpc-google-iam-v1 >= 0.12.4, <1.0.0dev",
-    "proto-plus >= 1.15.0",
+    "proto-plus >= 1.15.0, <2.0.0dev",
+    "protobuf >= 3.19.0, <4.0.0dev",
     "grafeas >=1.4.1, <2.0dev",
 ]
 extras = {"libcst": "libcst >= 0.2.5"}
diff --git a/testing/constraints-3.6.txt b/testing/constraints-3.6.txt
index a9d02d6..324b99d 100644
--- a/testing/constraints-3.6.txt
+++ b/testing/constraints-3.6.txt
@@ -10,3 +10,4 @@ grpc-google-iam-v1==0.12.4
 proto-plus==1.15.0
 libcst==0.2.5
 grafeas==1.4.1
+protobuf==3.19.0