added /vendor/bin to the whitelist of update