bump vendor to fix django downgrade