Update CHANGELOG for v1.14.5.

CHANGELOG

@@ -1,5 +1,10 @@
 CHANGELOG
 
+v1.14.5 - 2025-11-18
+
+Changed:
+- certlib/verify: fix a nil-pointer dereference.
+
 v1.14.4 - 2025-11-18
 
 Added:

certlib/verify/verify.go

@@ -48,7 +48,9 @@ func prepareVerification(w io.Writer, target string, opts *Opts) (*verifyResult,
 			Config:             lib.StrictBaselineTLSConfig(),
 			ForceIntermediates: false,
 		}
+	}
 
+	if opts.Config.RootCAs == nil {
 		roots, err = x509.SystemCertPool()
 		if err != nil {
 			return nil, fmt.Errorf("couldn't load system cert pool: %w", err)