vendor in missing deps

@oakes and I tried building offline in a coffee shop, and failed because we were missing these deps in `vendor/`.