In #379, we pinned a few dependencies as CI workarounds (flake8 and protobuf). There are also a couple other dependencies pinned (see #374 and #377) that could be bumped.
For the most part, this repo isn't being actively developed so this is probably fine but opening this issue for if/when we revisit dependencies more generally.