update vendors (no dev)