CHANGES: document external-deps / legal-info / source / source-checks changes

And fixup indentation for version/patch dependencies section.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

CHANGES

@@ -26,9 +26,9 @@
 	been added. Missing hashes now stop the build unless
 	explicitly disabled.
 
-	Spaces and colons (:) are now supported in
-	package versions. Dependencies can now be listed for the patch
-	step (<PKG>_PATCH_DEPENDENCIES). Kconfig and Linux kernel
+	Spaces and colons (:) are now supported in package
+	versions. Dependencies can now be listed for the patch step
+	(<PKG>_PATCH_DEPENDENCIES). Kconfig and Linux kernel
 	extensions infrastructure has been added.
 
 	Makedevs now has a recursive (r) option.
@@ -36,6 +36,11 @@
 	The variable containing the list of packages to build has been
 	renamed from TARGETS to PACKAGES.
 
+	Make external-deps / legal-info / source / source-check have
+	been reimplemented using the package infrastructure, so their
+	output/behaviour may differ from earlier (some packages were
+	not included in the past).
+
 	The old insecure DES password encoding is no longer supported.
 
 	U-Boot patch option now support direct references to patch