fix vendor dependencies