chore(deps): upgrade fallow to 3.32

[thymikee]

Summary

Upgrades fallow 2.104 → 3.32. 3.33.x is skipped because it is younger than pnpm's 24h minimum release age.

• fallow 3 rejects the "comment" field, so the 80 .fallowrc.json notes become JSONC comments with the same text.
• 3.32 makes --fail-on-issues fail on warn findings, which turns check:production-exports back into an enforcing gate (chore: baseline-free production-exports cleanup (#1276) #1282). The previous PR clears its findings.
• scripts/** never ships, so ignoreFindings scopes that gate to shipped code. It stays in the module graph; a child ignorePatterns would replace the base config's array.

Health findings are unchanged (90 on both versions). 3.x also reports that 57 of the 145 entries in fallow-baselines/health.json are stale. They already were, 2.104 did not report it, and pruning them is left out of scope. It also newly reports 6 root devDependencies as unused. These are inherited, so they don't affect the audit gate.

4 files, +132/−119.

Validation

Tested c985ff34d (rebased on main 19203c620): pnpm check:affected --run passed (all runnable checks). check:fallow and check:production-exports pass on fallow 3.32.0.

🤖 Generated with Claude Code

[github-actions]

PR Preview Action v1.8.1
🚀 View preview at https://callstack.github.io/agent-device/pr-preview/pr-3370/
Built to branch gh-pages at 2026-10-10 16:48 UTC. Preview will be ready when the GitHub Pages deployment is complete.

[github-actions]

Size Report

Metric	Base	Current	Diff
Installed (including dependencies)	5.16 MB	5.16 MB	-1 B
Package (unpacked)	5.16 MB	5.16 MB	-1 B
Package (download)	1.55 MB	1.55 MB	-7 B

Startup median (7 runs, lower is better):

Scenario	Base	Current	Diff
CLI --version	26.8 ms	26.6 ms	-0.2 ms
CLI --help	81.9 ms	83.3 ms	+1.4 ms

[cubic-dev-ai]

No issues found across 4 files

_{View guided diff | Turn on auto-fix | Re-trigger cubic}

[thymikee]

The PR is ready at 5d190bd; I found no problems in the code.

Not blocking: the new ignoreFindings: ["scripts/**"] in fallow-production-exports.json now hides every scripts/ finding in the --production gate, so the per-symbol scripts/ ignoreExports entries in the base config look redundant (their comments say they exist only for that analysis: resolveVitestMaxWorkers, readTestScope, ownedTestFiles, and the scripts/ half of the help-conformance glob). You could drop them and rerun check:fallow and check:production-exports on 3.32, keeping any that check:fallow still needs outside --production with a reworded comment. You can take or leave this.

I did not run fallow 3.32 locally, so I have not verified that the checks pass or the 90 health findings. I also did not diff the lockfile for transitive bumps beyond fallow, and I did not verify the stale baseline count (57 of 145) or the 6 newly reported unused devDependencies that the PR body marks as out of scope.

CI is unclear: every job that is not green is cancelled or queued, and none has failure logs. The cancellations look like superseded runs on the stack. The jobs that run fallow (Lint & Format, Repo Guards, Typecheck & Package) overlap this diff, so please rerun them and get them green. The branch is stacked on #3369, so it also waits for that to merge.