diff --git a/distribution/server/src/assemble/LICENSE.bin.txt b/distribution/server/src/assemble/LICENSE.bin.txt
index fa6946e512259..e2782a6729763 100644
--- a/distribution/server/src/assemble/LICENSE.bin.txt
+++ b/distribution/server/src/assemble/LICENSE.bin.txt
@@ -321,7 +321,7 @@ The Apache Software License, Version 2.0
      - com.fasterxml.jackson.module-jackson-module-jaxb-annotations-2.11.1.jar
      - com.fasterxml.jackson.module-jackson-module-jsonSchema-2.11.1.jar
  * Caffeine -- com.github.ben-manes.caffeine-caffeine-2.6.2.jar
- * Proto Google Common Protos -- com.google.api.grpc-proto-google-common-protos-1.12.0.jar
+ * Proto Google Common Protos -- com.google.api.grpc-proto-google-common-protos-1.17.0.jar
  * Joda -- org.joda-joda-convert-2.2.1.jar
  * Bitbucket -- org.bitbucket.b_c-jose4j-0.7.2.jar
  * Gson
@@ -445,70 +445,89 @@ The Apache Software License, Version 2.0
  * RocksDB - org.rocksdb-rocksdbjni-5.13.3.jar
  * Google Error Prone Annotations - com.google.errorprone-error_prone_annotations-2.1.3.jar
  * OkHttp
-    - com.squareup.okhttp-okhttp-2.5.0.jar
+    - com.squareup.okhttp-okhttp-2.7.4.jar
  * Okio - com.squareup.okio-okio-1.13.0.jar
  * Javassist -- org.javassist-javassist-3.25.0-GA.jar
-  * gRPC
-    - io.grpc-grpc-all-1.18.0.jar
-    - io.grpc-grpc-auth-1.18.0.jar
-    - io.grpc-grpc-context-1.18.0.jar
-    - io.grpc-grpc-core-1.18.0.jar
-    - io.grpc-grpc-netty-1.18.0.jar
-    - io.grpc-grpc-okhttp-1.18.0.jar
-    - io.grpc-grpc-protobuf-1.18.0.jar
-    - io.grpc-grpc-protobuf-lite-1.18.0.jar
-    - io.grpc-grpc-stub-1.18.0.jar
+ * gRPC
+    - io.grpc-grpc-all-1.31.0.jar
+    - io.grpc-grpc-auth-1.31.0.jar
+    - io.grpc-grpc-context-1.31.0.jar
+    - io.grpc-grpc-core-1.31.0.jar
+    - io.grpc-grpc-netty-1.31.0.jar
+    - io.grpc-grpc-okhttp-1.31.0.jar
+    - io.grpc-grpc-protobuf-1.31.0.jar
+    - io.grpc-grpc-protobuf-lite-1.31.0.jar
+    - io.grpc-grpc-stub-1.31.0.jar
+    - io.grpc-grpc-alts-1.31.0.jar
+    - io.grpc-grpc-api-1.31.0.jar
+    - io.grpc-grpc-grpclb-1.31.0.jar
+    - io.grpc-grpc-netty-shaded-1.31.0.jar
     - io.grpc-grpc-protobuf-nano-1.18.0.jar
+    - io.grpc-grpc-services-1.31.0.jar
     - io.grpc-grpc-testing-1.18.0.jar
-  * OpenCensus
+    - io.grpc-grpc-xds-1.31.0.jar
+ * OpenCensus
     - io.opencensus-opencensus-api-0.18.0.jar
     - io.opencensus-opencensus-contrib-grpc-metrics-0.18.0.jar
-  * Jodah
+    - io.opencensus-opencensus-contrib-http-util-0.24.0.jar
+    - io.opencensus-opencensus-proto-0.2.0.jar
+ * Jodah
     - net.jodah-typetools-0.5.0.jar
-  * Apache Avro
+ * Apache Avro
     - org.apache.avro-avro-1.9.1.jar
     - org.apache.avro-avro-protobuf-1.9.1.jar
-  * Apache Curator
+ * Apache Curator
     - org.apache.curator-curator-client-4.0.1.jar
     - org.apache.curator-curator-framework-4.0.1.jar
     - org.apache.curator-curator-recipes-4.0.1.jar
-  * Apache Yetus
+ * Apache Yetus
     - org.apache.yetus-audience-annotations-0.5.0.jar
-  * @FreeBuilder
+ * @FreeBuilder
     - org.inferred-freebuilder-1.14.9.jar
-  * Squareup
+ * Squareup
     - com.squareup.okhttp3-logging-interceptor-3.14.3.jar
     - com.squareup.okhttp3-okhttp-3.14.3.jar
-  * Kubernetes Client
+ * Kubernetes Client
     - io.kubernetes-client-java-9.0.2.jar
     - io.kubernetes-client-java-api-9.0.2.jar
     - io.kubernetes-client-java-proto-9.0.2.jar
-  * Joda Time
+ * Joda Time
     - joda-time-2.10.1.jar
     - joda-time-joda-time-2.10.1.jar
-  * Dropwizard
+ * Dropwizard
     - io.dropwizard.metrics-metrics-core-3.1.0.jar
     - io.dropwizard.metrics-metrics-graphite-3.1.0.jar
     - io.dropwizard.metrics-metrics-jvm-3.1.0.jar
-  * Prometheus
+ * Prometheus
     - io.prometheus-simpleclient_httpserver-0.5.0.jar
-  * Java JSON WebTokens
+ * Java JSON WebTokens
     - io.jsonwebtoken-jjwt-api-0.11.1.jar
     - io.jsonwebtoken-jjwt-impl-0.11.1.jar
     - io.jsonwebtoken-jjwt-jackson-0.11.1.jar
-  * JCTools - Java Concurrency Tools for the JVM
+ * JCTools - Java Concurrency Tools for the JVM
     - org.jctools-jctools-core-2.1.2.jar
-  * Vertx
+ * Vertx
     - io.vertx-vertx-auth-common-3.5.3.jar
     - io.vertx-vertx-bridge-common-3.5.3.jar
     - io.vertx-vertx-core-3.5.3.jar
     - io.vertx-vertx-web-3.5.3.jar
-  * Apache ZooKeeper
+ * Apache ZooKeeper
     - org.apache.zookeeper-zookeeper-jute-3.5.7.jar
+ * Conscrypt
+    - org.conscrypt-conscrypt-openjdk-uber-2.2.1.jar
+ * Http Components
+    - org.apache.httpcomponents-httpclient-4.5.10.jar
+    - org.apache.httpcomponents-httpcore-4.4.12.jar
+ * Google Auto Values
+    - com.google.auto.value-auto-value-annotations-1.7.jar
+ * Google Http Client
+    - com.google.http-client-google-http-client-1.34.0.jar
+    - com.google.http-client-google-http-client-jackson2-1.34.0.jar
 
 BSD 3-clause "New" or "Revised" License
  * Google auth library
-    - com.google.auth-google-auth-library-credentials-0.9.0.jar -- licenses/LICENSE-google-auth-library.txt
+    - com.google.auth-google-auth-library-credentials-0.20.0.jar -- licenses/LICENSE-google-auth-library.txt
+    - com.google.auth-google-auth-library-oauth2-http-0.20.0.jar -- licenses/LICENSE-google-auth-library.txt
  * LevelDB -- (included in org.rocksdb.*.jar) -- licenses/LICENSE-LevelDB.txt
  * JSR305 -- com.google.code.findbugs-jsr305-3.0.2.jar -- licenses/LICENSE-JSR305.txt
  * JavaHamcrest -- org.hamcrest-hamcrest-core-1.3.jar -- licenses/LICENSE-Hamcrest.txt
@@ -530,8 +549,8 @@ MIT License
 
 Protocol Buffers License
  * Protocol Buffers
-   - com.google.protobuf-protobuf-java-3.11.4.jar -- licenses/LICENSE-protobuf.txt
-   - com.google.protobuf-protobuf-java-util-3.11.4.jar -- licenses/LICENSE-protobuf.txt
+   - com.google.protobuf-protobuf-java-3.12.0.jar -- licenses/LICENSE-protobuf.txt
+   - com.google.protobuf-protobuf-java-util-3.12.0.jar -- licenses/LICENSE-protobuf.txt
    - com.google.protobuf.nano-protobuf-javanano-3.0.0-alpha-5.jar -- licenses/LICENSE-protobuf.txt
 
 CDDL-1.1 -- licenses/LICENSE-CDDL-1.1.txt
@@ -588,6 +607,10 @@ Bouncy Castle License
     - org.bouncycastle-bcprov-ext-jdk15on-1.66.jar
     - org.bouncycastle-bcprov-jdk15on-1.66.jar
 
+Go Lang License
+ * RE2J -- licenses/LICENSE-golang.txt
+    - com.google.re2j-re2j-1.2.jar
+
 ------------------------
 
 Additionaly, Netty includes code with the following licenses:
diff --git a/pom.xml b/pom.xml
index d38d05c28bd65..2fe10c01ff7be 100644
--- a/pom.xml
+++ b/pom.xml
@@ -123,9 +123,9 @@ flexible messaging model and an intuitive client API.</description>
     <dockerfile-maven.version>1.4.13</dockerfile-maven.version>
     <typetools.version>0.5.0</typetools.version>
     <protobuf2.version>2.4.1</protobuf2.version>
-    <protobuf3.version>3.11.4</protobuf3.version>
+    <protobuf3.version>3.12.0</protobuf3.version>
     <protoc3.version>${protobuf3.version}</protoc3.version>
-    <grpc.version>1.18.0</grpc.version>
+    <grpc.version>1.31.0</grpc.version>
     <protoc-gen-grpc-java.version>${grpc.version}</protoc-gen-grpc-java.version>
     <gson.version>2.8.2</gson.version>
     <sketches.version>0.8.3</sketches.version>
diff --git a/pulsar-functions/runtime/pom.xml b/pulsar-functions/runtime/pom.xml
index e259068263d85..c2ecb505545c7 100644
--- a/pulsar-functions/runtime/pom.xml
+++ b/pulsar-functions/runtime/pom.xml
@@ -33,6 +33,18 @@
 
   <dependencies>
 
+    <dependency>
+      <groupId>com.google.protobuf</groupId>
+      <artifactId>protobuf-java</artifactId>
+      <version>${protobuf3.version}</version>
+    </dependency>
+
+    <dependency>
+      <groupId>${project.groupId}</groupId>
+      <artifactId>pulsar-broker-common</artifactId>
+      <version>${project.version}</version>
+    </dependency>
+
     <dependency>
       <groupId>${project.groupId}</groupId>
       <artifactId>pulsar-functions-instance</artifactId>
@@ -73,11 +85,11 @@
       </exclusions>
     </dependency>
 
-      <dependency>
-          <groupId>${project.groupId}</groupId>
-          <artifactId>pulsar-broker-common</artifactId>
-          <version>${project.version}</version>
-      </dependency>
+    <dependency>
+        <groupId>${project.groupId}</groupId>
+        <artifactId>pulsar-broker-common</artifactId>
+        <version>${project.version}</version>
+    </dependency>
 
   </dependencies>
 
diff --git a/pulsar-functions/worker-shaded/pom.xml b/pulsar-functions/worker-shaded/pom.xml
index 6c53e5807db3e..949a124fbf653 100644
--- a/pulsar-functions/worker-shaded/pom.xml
+++ b/pulsar-functions/worker-shaded/pom.xml
@@ -78,7 +78,7 @@
               <artifactSet>
                 <!-- package the dependencies that use protobuf & grpc and relocate protobuf -->
                 <includes>
-                  <include>com.google.protobuf:protobuf-lite</include>
+                  <include>com.google.protobuf:protobuf-javalite</include>
                   <include>com.google.protobuf:protobuf-java</include>
                   <include>com.google.protobuf.nano:protobuf-javanano</include>
                   <include>com.google.protobuf:protobuf-java-util</include>
diff --git a/pulsar-sql/presto-distribution/LICENSE b/pulsar-sql/presto-distribution/LICENSE
index 4ce6e3b9b277e..d786830e96d83 100644
--- a/pulsar-sql/presto-distribution/LICENSE
+++ b/pulsar-sql/presto-distribution/LICENSE
@@ -458,8 +458,8 @@ The Apache Software License, Version 2.0
 Protocol Buffers License
  * Protocol Buffers
    - protobuf-shaded-2.1.0-incubating.jar
-   - protobuf-java-3.11.4.jar
-   - protobuf-java-util-3.11.4.jar
+   - protobuf-java-3.12.0.jar
+   - protobuf-java-util-3.12.0.jar
 
 BSD 3-clause "New" or "Revised" License
   *  RE2J TD -- re2j-td-1.4.jar