Update validus.dependencies

Removed vendor, is now in manifest