Vendor-in updated dependencies