diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2e400433..0f6b6930 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,10 +4,20 @@
 
 ### Changed
 
+### Fixed
+
+## 2.3.1
+
+### Added
+
+### Changed
+
 - Docker Hub image publish workflow loads credentials via `release-secrets` / SSM (same as other public LD images) instead of repo `DOCKERHUB_*` secrets
+- Run fork pull request unit tests on the unprivileged `pull_request` workflow instead of `pull_request_target`
 
 ### Fixed
 
+- `skip-comment` input had inverted behavior in v2.3.0 (`true` still posted PR comments; `false` skipped)
 - Update flag listing from deprecated REST API version `20220603` to the current version,
   [`20240415`](https://launchdarkly.com/docs/guides/api/api-migration-guide), including pagination support
   for active and archived flags
diff --git a/README.md b/README.md
index 338e70e0..5103a428 100644
--- a/README.md
+++ b/README.md
@@ -109,13 +109,13 @@ jobs:
       - name: Find flags
         id: find-flags
         # Pin to a release that includes the docker/ entry point and published image (see changelog).
-        uses: launchdarkly/find-code-references-in-pull-request/docker@v2.3.0
+        uses: launchdarkly/find-code-references-in-pull-request/docker@v2.3.1
         with:
           project-key: default
           environment-key: production
           access-token: ${{ secrets.LD_ACCESS_TOKEN }}
           repo-token: ${{ secrets.GITHUB_TOKEN }}
-          dockerImage: your.registry.example/launchdarkly/find-code-references-in-pull-request:2.3.0
+          dockerImage: your.registry.example/launchdarkly/find-code-references-in-pull-request:2.3.1
 ```
 
 This entry point requires a Docker CLI on the runner (included on GitHub-hosted `ubuntu-*` runners). Existing workflows that use the root Action do not need to change.
diff --git a/docker/action.yml b/docker/action.yml
index d56335c2..06f6ea15 100644
--- a/docker/action.yml
+++ b/docker/action.yml
@@ -55,12 +55,12 @@ inputs:
     description: >-
       Container image to run. Defaults to the public Docker Hub runtime image.
       Set this to your mirrored/proxy image (for example
-      your.registry.example/launchdarkly/find-code-references-in-pull-request:2.3.0).
+      your.registry.example/launchdarkly/find-code-references-in-pull-request:2.3.1).
       Authenticate to private registries with docker/login-action (or equivalent)
       in a prior step. Requires a runner with a Docker CLI (GitHub-hosted
       ubuntu-* runners include one).
     required: false
-    default: "launchdarkly/find-code-references-in-pull-request:2.3.0"
+    default: "launchdarkly/find-code-references-in-pull-request:2.3.1"
 
 outputs:
   any-modified:
diff --git a/internal/version/version.go b/internal/version/version.go
index aec39b19..fd2e2a4c 100644
--- a/internal/version/version.go
+++ b/internal/version/version.go
@@ -1,3 +1,3 @@
 package version
 
-const Version = "2.3.0"
+const Version = "2.3.1"