diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0abdc8b..de8896e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,11 @@
 # Changelog
 
+## 2.3.1
+
+### Fixes
+
+- **`devenvModules.default` now exposes `yq` directly.** The `josh-sync` package it includes is `wrapProgram`-wrapped, so its bundled PATH (yq, jq, etc.) only applied while `josh-sync` itself was running — plain `yq` was never actually on PATH in a consumer's devenv shell. This broke the manual `yq -i` config-editing commands the josh-sync skill's docs call for (e.g. schema migrations) on any project without a system-wide yq install. `pkgs.yq-go` is now added to the module's `packages` list directly.
+
 ## 2.3.0
 
 ### Features
diff --git a/VERSION b/VERSION
index 276cbf9..2bf1c1c 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-2.3.0
+2.3.1
diff --git a/flake.nix b/flake.nix
index d6a1de9..97df5b8 100644
--- a/flake.nix
+++ b/flake.nix
@@ -57,8 +57,15 @@
         });
 
       # devenv module for consumers
+      #
+      # `self.packages.${pkgs.system}.default` is wrapProgram-wrapped, so its
+      # PATH additions (yq, jq, etc.) only apply while `josh-sync` itself is
+      # running — they don't reach the ambient devenv shell. Add yq-go
+      # directly so consumers can run the `yq -i` commands the josh-sync
+      # skill's config-editing docs call for (e.g. schema migrations),
+      # without needing a system-wide yq install.
       devenvModules.default = { pkgs, ... }: {
-        packages = [ self.packages.${pkgs.system}.default ];
+        packages = [ self.packages.${pkgs.system}.default pkgs.yq-go ];
         dotenv.disableHint = true;
       };