Closes #4834

There are a few possibilities to fix this specific bug. This is the shortest fix, and still relatively low risk

Fixes #4823

Incorrect assumptions around the policy API

Fixes #4714

See microsoft/azure-pipelines-image-generation#1317

Fixes #4775, Fixes #4657

* chore(ci): downgrade macos

* chore(ci): use shallow fetch

Azure DevOps returns the target branch in the form of `/ref/heads/master`, but Renovate expects just `master`

Fixes #4812

See [Microsoft-hosted agents](https://docs.microsoft.com/en-us/azure/devops/pipelines/agents/hosted?view=azure-devops#use-a-microsoft-hosted-agent) for a complete list of available images.

These don't update very often, but what do you think about targeting `windows-lates`, `ubuntu-latest`, and `macOS-latest`?

The public documentation hasn't been updated, but the task is available. See [here](https://github.com/microsoft/azure-pipelines-tasks/tree/master/Tasks/CacheV2).

Fixes #4757

fix: Allow Date objects to pass through sanitizeValue without all of the fields being removed (#4809)

This fixes an issue where timestamps were not being logged because `Object.entries<any>(value)` for a Date object would return `{}`.

Fixes #4794

Otherwise the language overwrites won't be merged correctly.

Signed-off-by: Simon Rüegg <simon.ruegg@vshn.ch>

This reverts commit 177c1c6b.

When running the `lockFileMaintenance`, the lock file is removed before it gets recreated. When the lock file is not present, npm creates a `package-lock.json` by default, so we need to rename it to `npm-shrinkwrap.json` when we want to get an updated version.