bundle: Ignore third-party deps like sun.io