diff --git a/requirements-ci.txt b/requirements-ci.txt
index ce62abf..be1d149 100644
--- a/requirements-ci.txt
+++ b/requirements-ci.txt
@@ -31,7 +31,7 @@ httpx>=0.27.0
 # ── Security scanning ─────────────────────────────────────────────────────────
 bandit==1.9.1
 pip-audit==2.9.0
-safety>=3.0.0
+safety>=3.8.1
 
 # ── License compliance ────────────────────────────────────────────────────────
 pip-licenses>=4.0.0