manifest: track whisperpush deps again