Update validus.dependencies

Remove vendor, it's in manifest now