update vendors lock file