vendors should track release in release repo