diff --git a/gradle/any/shared-mvn-coords.gradle b/gradle/any/shared-mvn-coords.gradle
index fd6c395213..bbca4f2bc6 100644
--- a/gradle/any/shared-mvn-coords.gradle
+++ b/gradle/any/shared-mvn-coords.gradle
@@ -31,5 +31,5 @@ ext {
   // TODO: figure out way to keep this version in sync with netcdf-java version
   // It is included in the netcdf-java-bom (via netcdf-java-platform), but we can't
   // reference that version in a gradle build script (see gradle/any/protobuf.gradle)
-  depVersion.protobuf = '3.19.3'
+  depVersion.protobuf = '3.21.7'
 }
diff --git a/tds/build.gradle b/tds/build.gradle
index 7cf5e2d717..3d66aa41e9 100644
--- a/tds/build.gradle
+++ b/tds/build.gradle
@@ -32,7 +32,9 @@ dependencies {
   // Allow for the use of AWS Security Token Service by cdm-s3
   // version matches that used by netCDF-Java
   // todo: remove once this is a runtime dependency of netCDF-Java
-  runtimeOnly 'software.amazon.awssdk:sts:2.17.156'
+  runtimeOnly ('software.amazon.awssdk:sts:2.17.156') {
+    exclude group: 'software.amazon.awssdk', module: 'netty-nio-client'
+  }
 
   // DAP4 Dependencies (technically forward)
   compile 'edu.ucar:d4cdm'