diff --git a/spack-environment/packages.yaml b/spack-environment/packages.yaml
index 923e589f..038c0745 100644
--- a/spack-environment/packages.yaml
+++ b/spack-environment/packages.yaml
@@ -453,7 +453,7 @@ packages:
     - '@1.17.0'
   py-onnxruntime:
     require:
-    - '@1.20.2'
+    - '@1.22.2:'
   py-pandas:
     require:
     - '@2.2.3:'
diff --git a/spack-packages.sh b/spack-packages.sh
index a9ee4543..b5cba554 100644
--- a/spack-packages.sh
+++ b/spack-packages.sh
@@ -35,6 +35,8 @@ a4cc9fad86c9c3353e65bd379f708f70d9984bf0
 7743e5ac5cdf9075800b3edacfed628c795a9a5e
 b9ad19ee2ce47f8b7fbe187d41d898f873bbc121
 931b8f47ff9470b3f957f0bb462964702277301a
+5f36a2b536a22ea3692bfdcd48a6c0c71e6488cf
+58593e5d028737fef024c8136045b9d3f988e3e3
 ---
 ## Optional hash table with comma-separated file list
 ## For these commits, the cherry-pick will be restricted to the listed files only.
@@ -69,3 +71,5 @@ read -r -d '' SPACKPACKAGES_CHERRYPICKS_FILES <<- \
 ## 7743e5ac5cdf9075800b3edacfed628c795a9a5e: harfbuzz: Ensure consistent meson builder with cairo dependency
 ## b9ad19ee2ce47f8b7fbe187d41d898f873bbc121: harfbuzz/pango: add harfbuzz gobject variant (& req for pango)
 ## 931b8f47ff9470b3f957f0bb462964702277301a: openblas: patch for +dynamic_dispatch target=aarch64
+## 5f36a2b536a22ea3692bfdcd48a6c0c71e6488cf: py-onnxruntime: add v1.21.1, v1.22.2
+## 58593e5d028737fef024c8136045b9d3f988e3e3: py-onnxruntime: patch to add linker flag -z noexecstack