From fdec1051740e41c1de8a6649e2b43ba27333598c Mon Sep 17 00:00:00 2001
From: Claude Fable 5 <noreply@anthropic.com>
Date: Sat, 5 Sep 2026 10:07:52 +0400
Subject: [PATCH] release: empty keychain-args array must not trip set -u on
 macOS bash 3.2

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
---
 scripts/publish-update.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scripts/publish-update.sh b/scripts/publish-update.sh
index 4849151..0a1f266 100755
--- a/scripts/publish-update.sh
+++ b/scripts/publish-update.sh
@@ -214,7 +214,7 @@ fi
 # above, which is what ships. A no-op when the two happen to be the same.
 echo "==> Signing ${APP_BUNDLE} with resolved identity"
 run_signed codesign --force --options runtime --timestamp \
-    "${CODESIGN_KEYCHAIN_ARGS[@]}" \
+    ${CODESIGN_KEYCHAIN_ARGS[@]+"${CODESIGN_KEYCHAIN_ARGS[@]}"} \
     --sign "${SIGN_IDENTITY}" \
     --identifier "${BUNDLE_ID}" \
     "${APP_BUNDLE}"