diff --git a/spack-environment/packages.yaml b/spack-environment/packages.yaml
index a9a5c48438dd084565873e0a6a70f56a51303bed..ac2880af2776d08ecaa4be3b51df8adf9c78be01 100644
--- a/spack-environment/packages.yaml
+++ b/spack-environment/packages.yaml
@@ -286,7 +286,7 @@ packages:
     - +plot
   protobuf:
     require:
-    - '@3.21.12'
+    - '@3.28.2'
   pyrobird:
     require:
     - '@0.1.23'
@@ -375,7 +375,7 @@ packages:
     - '@3.3.3'
   py-protobuf:
     require:
-    - '@4.21.9'
+    - '@5.28.2'
   py-pygithub:
     require:
     - '@2.1.1'
diff --git a/spack.sh b/spack.sh
index f3adcb3920135bf7ece19ed3aff5f6f90f12484f..5f5b74e45bbf14c5be30b6b509bbcdddb5effde4 100644
--- a/spack.sh
+++ b/spack.sh
@@ -10,6 +10,7 @@ read -r -d '' SPACK_CHERRYPICKS <<- \
 --- || true
 09f75ee426a2e05e0543570821582480ff823ba5
 b90ac6441cfdf6425cb59551e7b0538899b69527
+8e7641e584563c4859cbef992cd534e75ffd8142
 ---
 ## Optional hash table with comma-separated file list
 read -r -d '' SPACK_CHERRYPICKS_FILES <<- \
@@ -19,3 +20,4 @@ read -r -d '' SPACK_CHERRYPICKS_FILES <<- \
 ## [hash]: [description]
 ## 09f75ee426a2e05e0543570821582480ff823ba5: setup-env.sh: if exe contains qemu, use /proc/$$/comm instead
 ## b90ac6441cfdf6425cb59551e7b0538899b69527: celeritas: remove ancient versions and add CUDA package dependency
+## 8e7641e584563c4859cbef992cd534e75ffd8142: onnx: set CMAKE_CXX_STANDARD to abseil-cpp cxxstd value