update from vendor to deps