I'll try to file this bug so that the Fedora packages can get fixed. Ideally it'd get corrected upstream, but I'm not going to file a bug there without investing more time trying to figure out why they're intentionally working against rpm's dep checking (and I don't have the time to do that now).
Added to BZ #193100[1]. Justin Mason, one of the SA authors replied to that bug to say they're aware of the issue and are indeed thinking of splitting sa-update into a separate rpm in their packages. So one way or another this should get resolved for the Fedora packages as well.
[1] https://bugzilla.redhat.com/193100