v1.14.38

anomalyco/opencodev1.14.38May 5, 2026by opencode-agent[bot]

AI Summary

A focused release addressing Content Security Policy for embedded UI requests and desktop HTTPS certificate handling.

Key Highlights

Embedded UI requests now work with arbitrary connect-src origins under default CSP
Desktop now trusts system CA certificates for HTTPS connections

Full Release Notes

## Core
### Bugfixes
- Embedded UI requests now work with arbitrary `connect-src` origins under the default CSP.

## Desktop
### Bugfixes
- Desktop now trusts system CA certificates for HTTPS connections.