Update notes:

- The base64-sha1 code got stripped out, so we bundle it now
- There are 2 optional dependencies which we want to ignore to avoid
  extra bundle size: xmldom and ws (the former is used by RN but we
  provide it in the app and the latter is only used by Node
  environments)