diff --git a/Info.plist b/Info.plist
index 2755b1e..60782a9 100644
--- a/Info.plist
+++ b/Info.plist
@@ -13,9 +13,9 @@
 	<key>CFBundlePackageType</key>
 	<string>APPL</string>
 	<key>CFBundleShortVersionString</key>
-	<string>0.2.0</string>
+	<string>0.3.0</string>
 	<key>CFBundleVersion</key>
-	<string>2</string>
+	<string>3</string>
 	<key>LSMinimumSystemVersion</key>
 	<string>14.0</string>
 	<key>LSUIElement</key>
diff --git a/scripts/publish-update.sh b/scripts/publish-update.sh
index 4849151..0a1f266 100755
--- a/scripts/publish-update.sh
+++ b/scripts/publish-update.sh
@@ -214,7 +214,7 @@ fi
 # above, which is what ships. A no-op when the two happen to be the same.
 echo "==> Signing ${APP_BUNDLE} with resolved identity"
 run_signed codesign --force --options runtime --timestamp \
-    "${CODESIGN_KEYCHAIN_ARGS[@]}" \
+    ${CODESIGN_KEYCHAIN_ARGS[@]+"${CODESIGN_KEYCHAIN_ARGS[@]}"} \
     --sign "${SIGN_IDENTITY}" \
     --identifier "${BUNDLE_ID}" \
     "${APP_BUNDLE}"