[Schema Inaccuracy] repository_vulnerability_alert webhook action create missing state auto_dismissed

[sdwilsh]

Schema Inaccuracy

We've seen actual payloads from GitHub with the state set to auto_dismissed for the create action of the repository_vulnerability_alert event.

Expected

The spec to match.

Reproduction Steps

Receive a webhook.

[shawnHartsell]

Thanks for submitting this @sdwilsh! I'll get this routed to the correct team. From what I can tell, the repository_vulnerability_alert has been deprecated and clients are bing asked to use the dependabot_alert event instead which defines the auto_dismissed state.