fix vendorfile and upgrade source