Add confirmed at field to vulnerability type in GQL

- Update docs
- Add changelog

doc/api/graphql/reference/gitlab_schema.graphql

@@ -24606,6 +24606,11 @@ type VulnerabilitiesCountByDayEdge {
 Represents a vulnerability
 """
 type Vulnerability implements Noteable {
+  """
+  Timestamp of when the vulnerability state was changed to confirmed
+  """
+  confirmedAt: Time
+
   """
   Description of the vulnerability
   """

doc/api/graphql/reference/gitlab_schema.json

@@ -71715,6 +71715,20 @@
           "name": "Vulnerability",
           "description": "Represents a vulnerability",
           "fields": [
+            {
+              "name": "confirmedAt",
+              "description": "Timestamp of when the vulnerability state was changed to confirmed",
+              "args": [
+
+              ],
+              "type": {
+                "kind": "SCALAR",
+                "name": "Time",
+                "ofType": null
+              },
+              "isDeprecated": false,
+              "deprecationReason": null
+            },
             {
               "name": "description",
               "description": "Description of the vulnerability",

doc/api/graphql/reference/index.md

@@ -3716,6 +3716,7 @@ Represents a vulnerability.
 
 | Field | Type | Description |
 | ----- | ---- | ----------- |
+| `confirmedAt` | Time | Timestamp of when the vulnerability state was changed to confirmed |
 | `description` | String | Description of the vulnerability |
 | `detectedAt` | Time! | Timestamp of when the vulnerability was first detected |
 | `discussions` | DiscussionConnection! | All discussions on this noteable |

ee/app/graphql/types/vulnerability_type.rb

@@ -62,6 +62,10 @@ module Types
           description: 'Timestamp of when the vulnerability was first detected',
           method: :created_at
 
+    field :confirmed_at, Types::TimeType, null: true,
+          description: 'Timestamp of when the vulnerability state was changed to confirmed',
+          method: :confirmed_at
+
     def user_notes_count
       ::Gitlab::Graphql::Aggregations::Vulnerabilities::LazyUserNotesCountAggregate.new(context, object)
     end

ee/changelogs/unreleased/228740-add-confirmed-at.yml

+---
+title: Add confirmed_at field to vulnerability in GraphQL
+merge_request: 49376
+author:
+type: changed

ee/spec/graphql/types/vulnerability_type_spec.rb

@@ -24,6 +24,7 @@ RSpec.describe GitlabSchema.types['Vulnerability'] do
        project
        issueLinks
        detected_at
+       confirmed_at
        notes
        discussions]
   end