chore(deps)(deps): update safety requirement from >=3.0.0 to >=3.8.1

[dependabot]

Updates the requirements on safety to permit the latest version.

Release notes

Sourced from safety's releases.

Version 3.8.1

What's Changed

• bump: version 3.8.0 → 3.8.1 (ec3368a)
• fix: support SFTY-format vulnerability IDs in policy files (#868) (796af4d)

Changelog

Sourced from safety's changelog.

3.8.1 (2026-05-27)

Fix

• support SFTY-format vulnerability IDs in policy files (#868)

3.8.0 (2026-05-26)

3.8.0b4 (2026-05-26)

Fix

• pin typer <0.26.0 to fix CLI import crash (#865)

3.8.0b3 (2026-03-12)

Feat

• report global/user packages linked (#843)

3.8.0b2 (2026-03-10)

Feat

• firewall: emit v2.0 auth envelope for machine token (MDM) auth (#841)
• auth: implement cross-org enrollment prevention (CLI side) (#839)
• auth: add org_slug to MachineCredentialConfig from enrollment API

Fix

• firewall: configure global package manager indexes on firewall init (#842)
• firewall: align auth priority in index_credentials with platform client
• auth: align auth priority to API Key > OAuth > Machine Token everywhere
• scan: display machine token auth in scan header instead of "Offline"

3.8.0b1 (2026-02-25)

Feat

• implement MDM enrollment authentication system (#834)
• display system scan summary to stdout after interactive scan completes (#832)
• major revamp of the system scan beta command (#829)

Fix

• drop FF for MDM authd cases (#838)
• system-scan: disable feature flag gate for MDM auth compatibility (#837)
• system-scan: resolve tool detection for versioned Windows executables (#835)
• cli: correct typos in check command docstring (#833)

... (truncated)

Commits

• ec3368a bump: version 3.8.0 → 3.8.1
• 796af4d fix: support SFTY-format vulnerability IDs in policy files (#868)
• a4d6a5c bump: version 3.8.0b4 → 3.8.0
• 2042d7b chore: update system-scan details in the README (#867)
• 7dfee9a bump: version 3.8.0b3 → 3.8.0b4
• 304fe88 fix: pin typer <0.26.0 to fix CLI import crash (#865)
• 5049dbf chore(core): remove system-scan command (#846)
• a86ed3c chore: format codebase (#844)
• c272016 bump: version 3.8.0b2 → 3.8.0b3
• 456f649 feat: report global/user packages linked (#843)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Assignees

The following users could not be added as assignees: YOUR_GITHUB_USERNAME. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Labels

The following labels could not be found: automerge-candidate, dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

✅ PR reviewable size is within recommended limits

[github-actions]

L9 Audit Harness Report

• Generated: 2026-08-31T03:12:33.995286+00:00
• Repo root: /home/runner/work/Cognitive.Engine.Graphs/Cognitive.Engine.Graphs
• Overall result: ✅ PASSED
• Exit code: 0

Step Results

Step	Status	Exit Code	Notes
Architecture Audit	✅ Passed	0
Spec Coverage	✅ Passed	0
Contract Wiring	✅ Passed	0

Architecture Audit Findings

Severity	Count
🔴 CRITICAL	0
🟠 HIGH	0
🟡 MEDIUM	15
🔵 LOW	0

See artifacts/audit_report.md for full details.

Spec Coverage

• ✅ Implemented: 37
• ⚠️ Partial: 9
• ❌ Missing: 0
• Total features: 46

Category	Implemented	Partial	Missing	Total
gates	10	0	0	10
scoring	7	0	0	7
v1.1_node	2	0	0	2
v1.1_edge	2	0	0	2
v1.1_action	0	2	0	2
v1.1_scoring	1	1	0	2
action_handler	0	6	0	6
gds_algorithm	5	0	0	5
research_pattern	10	0	0	10

See artifacts/coverage_report.md for full details.

Next Steps

All checks passed. Safe to merge.

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ❌ 1 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ✅ 0 package(s) with unknown licenses.

See the Details below.

License Issues

requirements-ci.txt

Package	Version	License	Issue Type
safety	>= 3.8.1	LicenseRef-scancode-proprietary-license AND MIT	Incompatible License

Allowed Licenses: MIT, Apache-2.0, BSD-3-Clause, BSD-2-Clause, ISC

Excluded from license check: pkg:pypi/structlog, pkg:pypi/prometheus-client

OpenSSF Scorecard

Package	Version	Score	Details
pip/safety	>= 3.8.1	Unknown	Unknown

Scanned Files

• requirements-ci.txt

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud