update validator, remove shipped version of deps

Should partially/totally replace #3921.

jsonpointer and jsonschema are stable, jsonref is 0.1 though.