Use deep_dup in bulk update service

We have some array parameters in params so it is safer to use deep_dup
in case these are mutated in some way by the update service

app/services/issuable/bulk_update_service.rb

@@ -60,7 +60,7 @@ module Issuable
         update_class.new(
           **update_class.constructor_container_arg(issuable.issuing_parent),
           current_user: current_user,
-          params: params.dup
+          params: dup_params
         ).execute(issuable)
       end
 
@@ -82,6 +82,19 @@ module Issuable
         .includes_for_bulk_update
     end
 
+    # Duplicates params and its top-level values
+    # We cannot use deep_dup because ActiveRecord objects will result
+    # to new records with no id assigned
+    def dup_params
+      dup = HashWithIndifferentAccess.new
+
+      params.each do |key, value|
+        dup[key] = value.is_a?(ActiveRecord::Base) ? value : value.dup
+      end
+
+      dup
+    end
+
     def response_success(message: nil, payload: nil)
       ServiceResponse.success(message: message, payload: payload)
     end