project: use vndr for vendoring Upstream-commit: c07234707878412eaaeab252af19adac8cf25d6b Component: engine