Automated discovery event PRs can have conflicts when working with subpackages

We have automation that automatically created CVE detection events which is great! Some packages that have subpackages have related advisory PRs created but also have merge conflicts. Some examples: https://github.com/wolfi-dev/advisories/pull/788 https://github.com/wolfi-dev/advisories/pull/786 https://github.com/wolfi-dev/advisories/pull/781 https://github.com/wolfi-dev/advisories/pull/756 https://github.com/wolfi-dev/advisories/pull/755