Merge pull request #524 from stackhpc/upstream/master-2026-02-05

Synchronise master with upstream

Author: priteau

kayobe/tests/unit/plugins/action/test_kolla_ansible_host_vars.py

@@ -50,7 +50,8 @@ class FakeTemplar(object):
 
     def __init__(self, variables):
         self.variables = variables
-        self.env = jinja2.Environment()
+        # Bandit complains about Jinja2 autoescaping without nosec.
+        self.env = jinja2.Environment()  # nosec
         self.env.filters['net_interface'] = _net_interface
         self.env.filters['net_parent'] = _net_parent
         self.env.filters['net_vlan'] = _net_vlan

releasenotes/notes/bump-stackhpc-linux-v1.5.1-c002b7c99921cd20.yaml

@@ -0,0 +1,9 @@
+---
+features:
+  - |
+    Bumps ``stackhpc.linux`` Ansible collection to v1.5.1. This adds
+    support for configuring MIG devices without creating vGPUs.
+fixes:
+  - |
+    Bumps ``stackhpc.linux`` Ansible collection to v1.5.1. This fixes
+    race conditions in setup of vGPU SR-IOV devices.

requirements.yml

@@ -18,7 +18,7 @@ collections:
   - name: openstack.cloud
     version: '<3'
   - name: stackhpc.linux
-    version: 1.3.4
+    version: 1.5.1
   - name: stackhpc.network
     version: 1.0.0
   - name: stackhpc.openstack

test-requirements.txt

@@ -3,6 +3,7 @@
 # process, which may cause wedges in the gate later.
 
 ansible-lint>=25.0.0,<26.0.0 # MIT
+bandit>=1.1.0 # Apache-2.0
 bashate>=0.2 # Apache-2.0
 coverage>=4.0 # Apache-2.0
 doc8 # Apache-2.0

tox.ini

@@ -39,6 +39,7 @@ commands =
   # directives.
   python3 {toxinidir}/tools/sphinx8 README.rst CONTRIBUTING.rst doc/source --ignore D001
   yamllint etc/kayobe
+  bandit -r --severity-level=high ansible kayobe tools
 
 [testenv:venv]
 deps =