diff --git a/spack.sh b/spack.sh
index 07e655d40f903068c128933c1590ee032158ab0a..88471db4b49beadd425ac3ab553c121fcd39e769 100644
--- a/spack.sh
+++ b/spack.sh
@@ -28,6 +28,7 @@ d3bf1e04fca844abb7c1eeac38dda4e126c81b67
 737b70cbbfacb3fba8054426e9b5bf8ede6d8faf
 a66586d749197841bd74e289802126f2359287a8
 7503a417731910d918a7863d1862f62c9b76429d
+096ab11961995ac8d69f7b177cbcadf618d3068e
 6c4abef75cb2b98c337f8a3179797e29dfdc9ca3
 ---
 ## Optional hash table with comma-separated file list
@@ -56,4 +57,5 @@ read -r -d '' SPACK_CHERRYPICKS_FILES <<- \
 ## 737b70cbbfacb3fba8054426e9b5bf8ede6d8faf: Buildcache: remove deprecated --allow-root and preview subcommand
 ## a66586d749197841bd74e289802126f2359287a8: spack buildcache push: best effort
 ## 7503a417731910d918a7863d1862f62c9b76429d: cuda: add v12.4.1
+## 096ab11961995ac8d69f7b177cbcadf618d3068e: py-onnx: link to external protobuf
 ## 6c4abef75cb2b98c337f8a3179797e29dfdc9ca3: py-protobuf: drop +cpp, always require protobuf