Incorrect packageRules massaging causes config error

[rarkins]

How are you running Renovate?

Self-hosted

If you're self-hosting Renovate, tell us what version of Renovate you run.

latest/source

Please select which platform you are using if self-hosting.

github.com

If you're self-hosting Renovate, tell us what version of the platform you run.

No response

Was this something which used to work for you, and then stopped?

I never saw this working

Describe the bug

When Renovate attempts to massage packageRules with nested objects, it can sometimes create invalid packageRules.

Reproduction: https://github.com/renovate-reproductions/migrate-nested

Relevant debug logs

Logs

DEBUG: massaged config (repository=renovate-reproductions/migrate-nested)
       "config": {
         "packageRules": [
           {"matchBaseBranches": ["main"]},
           {
             "matchBaseBranches": ["main"],
             "matchUpdateTypes": ["major"],
             "enabled": true
           }
         ]
       }
 WARN: Found renovate config warnings (repository=renovate-reproductions/migrate-nested)
       "warnings": [
         {
           "topic": "Configuration Error",
           "message": "packageRules[0]: Each packageRule must contain at least one non-match* or non-exclude* field. Rule: {\"matchBaseBranches\":[\"main\"]}"
         }
       ]

Have you created a minimal reproduction repository?

I have linked to a minimal reproduction repository in the bug description

[renovate-release]

🎉 This issue has been resolved in version 32.128.0 🎉

The release is available on:

• GitHub release
• 32.128.0

Your semantic-release bot 📦🚀