Move third-party assets to /vendor
update bundle