Repository rulesets had a bug where UpdateRulesetClearBypassActor failed to clear bypass actors because it sent {"bypass_actors":null} instead of {"bypass_actors":[]}. This was fixed in PR #3727 (issue #3726) by explicitly initializing BypassActors with an empty slice.
The same bug exists in organization and enterprise rulesets:
Organizations.UpdateRepositoryRulesetClearBypassActor
Enterprise.UpdateRepositoryRulesetClearBypassActor
Both functions construct rulesetClearBypassActors{} with BypassActors uninitialized (nil).