diff --git a/Directory.Packages.props b/Directory.Packages.props
index 7da10e4f..62d64872 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -15,10 +15,28 @@
     <PackageVersion Include="bunit" Version="2.0.33-preview" />
     <PackageVersion Include="coverlet.collector" Version="6.0.4" />
     <PackageVersion Include="FluentAssertions" Version="8.3.0" />
-    <PackageVersion Include="Google.Protobuf" Version="3.29.3" />
-    <PackageVersion Include="Grpc.AspNetCore" Version="2.71.0" />
-    <PackageVersion Include="Grpc.Net.Client" Version="2.71.0" />
-    <PackageVersion Include="Grpc.Tools" Version="2.71.0" />
+    <!--
+      gRPC stack raised 2.71.0 -> 2.76.0 (Protobuf 3.29.3 -> 3.34.1) on 2026-07-19.
+
+      Forced by ZB.MOM.WW.LocalDb.Replication 0.1.0, whose nuspec floors Grpc.AspNetCore,
+      Grpc.Net.Client, Grpc.Core.Api and Grpc.Tools at 2.76.0 and Google.Protobuf at 3.34.1.
+      Below that floor restore fails NU1605 (package downgrade), so this is not optional for
+      LocalDb adoption.
+
+      The SQLitePCLRaw note below deferred exactly this bump as belonging in "their own
+      reviewed commit" rather than smuggled under a security fix - so it IS its own commit.
+      Direct consumer surface is narrow: Grpc.AspNetCore only in Host, Grpc.Net.Client only
+      in Communication. Grpc.Core.Api is pinned explicitly here to keep the whole family on
+      one version rather than letting it float in transitively.
+
+      Not bumped here: Microsoft.Data.SqlClient and Newtonsoft.Json, also named in that note.
+      Nothing forces them, and they are a data-access change with its own risk profile.
+    -->
+    <PackageVersion Include="Google.Protobuf" Version="3.34.1" />
+    <PackageVersion Include="Grpc.AspNetCore" Version="2.76.0" />
+    <PackageVersion Include="Grpc.Net.Client" Version="2.76.0" />
+    <PackageVersion Include="Grpc.Core.Api" Version="2.76.0" />
+    <PackageVersion Include="Grpc.Tools" Version="2.76.0" />
     <PackageVersion Include="MailKit" Version="4.16.0" />
     <PackageVersion Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="10.0.7" />
     <PackageVersion Include="Microsoft.AspNetCore.Authorization" Version="10.0.7" />