diff --git a/kayobe/tests/unit/plugins/action/test_kolla_ansible_host_vars.py b/kayobe/tests/unit/plugins/action/test_kolla_ansible_host_vars.py
index 3ae00e1a9..480a5cf2a 100644
--- a/kayobe/tests/unit/plugins/action/test_kolla_ansible_host_vars.py
+++ b/kayobe/tests/unit/plugins/action/test_kolla_ansible_host_vars.py
@@ -50,7 +50,8 @@ class FakeTemplar(object):
 
     def __init__(self, variables):
         self.variables = variables
-        self.env = jinja2.Environment()
+        # Bandit complains about Jinja2 autoescaping without nosec.
+        self.env = jinja2.Environment()  # nosec
         self.env.filters['net_interface'] = _net_interface
         self.env.filters['net_parent'] = _net_parent
         self.env.filters['net_vlan'] = _net_vlan
diff --git a/releasenotes/notes/bump-stackhpc-linux-v1.5.1-c002b7c99921cd20.yaml b/releasenotes/notes/bump-stackhpc-linux-v1.5.1-c002b7c99921cd20.yaml
new file mode 100644
index 000000000..a15eb2584
--- /dev/null
+++ b/releasenotes/notes/bump-stackhpc-linux-v1.5.1-c002b7c99921cd20.yaml
@@ -0,0 +1,9 @@
+---
+features:
+  - |
+    Bumps ``stackhpc.linux`` Ansible collection to v1.5.1. This adds
+    support for configuring MIG devices without creating vGPUs.
+fixes:
+  - |
+    Bumps ``stackhpc.linux`` Ansible collection to v1.5.1. This fixes
+    race conditions in setup of vGPU SR-IOV devices.
diff --git a/requirements.yml b/requirements.yml
index a52a64662..861b53393 100644
--- a/requirements.yml
+++ b/requirements.yml
@@ -18,7 +18,7 @@ collections:
   - name: openstack.cloud
     version: '<3'
   - name: stackhpc.linux
-    version: 1.3.4
+    version: 1.5.1
   - name: stackhpc.network
     version: 1.0.0
   - name: stackhpc.openstack
diff --git a/test-requirements.txt b/test-requirements.txt
index 6295d47fd..f5270c8d3 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -3,6 +3,7 @@
 # process, which may cause wedges in the gate later.
 
 ansible-lint>=25.0.0,<26.0.0 # MIT
+bandit>=1.1.0 # Apache-2.0
 bashate>=0.2 # Apache-2.0
 coverage>=4.0 # Apache-2.0
 doc8 # Apache-2.0
diff --git a/tox.ini b/tox.ini
index a8ea73ca1..de8c0fa6b 100644
--- a/tox.ini
+++ b/tox.ini
@@ -39,6 +39,7 @@ commands =
   # directives.
   python3 {toxinidir}/tools/sphinx8 README.rst CONTRIBUTING.rst doc/source --ignore D001
   yamllint etc/kayobe
+  bandit -r --severity-level=high ansible kayobe tools
 
 [testenv:venv]
 deps =