In the changed files archive for a release, there is a vendor folder. I'm pretty sure that in general the vendor folder should be uploaded too regardless of which micro versions are being uploaded, overwriting the current vendor folder because these libraries are typically updated between releases and I don't see a vendor folder inside the changed file directory.