diff --git a/CHANGELOG.md b/CHANGELOG.md
index 909c555..94f98a0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -14,6 +14,7 @@ always bump at least minor; breaking schema changes bump major.
 - Detect Okta via the `@okta/okta-auth-js`, `@okta/okta-react`,
   `@okta/okta-angular`, `@okta/okta-vue`, `@okta/jwt-verifier`, and
   `@okta/okta-sdk-nodejs` imports, mapped to `auth/okta` (#2).
+- Add `infra/gitlab-ci` to the closed skill taxonomy (#24).
 
 ### Fixed
 - Improve manifest dependency detection by comparing parent and child
diff --git a/taxonomy.json b/taxonomy.json
index 730cb17..f7211f3 100644
--- a/taxonomy.json
+++ b/taxonomy.json
@@ -1,6 +1,6 @@
 {
   "$comment": "Closed public vocabulary of skill slugs. This file is the ONLY source of valid values for detected_skills[].slug in the bundle: a slug not listed here makes the bundle invalid. Detection maps signatures/*.json matches to these slugs — deterministically, locally, with zero network calls. Adding a slug requires a PR to this file (and a signature definition); slugs are never hardcoded in the CLI. Placeholder set, to be expanded.",
-  "version": "1.14.0",
+  "version": "1.15.0",
   "skills": [
     { "slug": "auth/supabase-auth", "label": "Supabase Auth" },
     { "slug": "auth/nextauth", "label": "NextAuth / Auth.js" },
@@ -103,6 +103,7 @@
     { "slug": "infra/terraform", "label": "Terraform" },
     { "slug": "infra/github-actions", "label": "GitHub Actions" },
     { "slug": "infra/circleci", "label": "CircleCI" },
+    { "slug": "infra/gitlab-ci", "label": "GitLab CI" },
     { "slug": "infra/aws-sdk", "label": "AWS SDK" },
     { "slug": "infra/pulumi", "label": "Pulumi" },
     { "slug": "infra/ansible", "label": "Ansible" },