Prepare release 0.150.0 (#5008)

* Prepare release 0.150.0

Signed-off-by: Pavol Loffay <p.loffay@gmail.com>

* Update collector to 0.150.1

Signed-off-by: Pavol Loffay <p.loffay@gmail.com>

---------

Signed-off-by: Pavol Loffay <p.loffay@gmail.com>

Author: pavolloffay

.chloggen/4379-watch-namespace-flag.yaml

@@ -2,6 +2,46 @@
 
 <!-- next version -->
 
+## 0.150.0
+
+### 🛑 Breaking changes 🛑
+
+- `auto-instrumentation`: Update default .NET auto-instrumentation version from 1.2.0 to 1.15.0 (#4996)
+  This update addresses security vulnerabilities in versions older than 1.15.0 (CVE-2026-40894, GHSA-g94r-2vxg-569j).
+  This is a breaking change due to HTTP semantic convention changes between versions.
+  Existing Instrumentation CRs using version 1.2.0 will NOT be automatically upgraded.
+  To upgrade, manually update the image in your Instrumentation CR after reviewing the migration guide.
+  See https://github.com/open-telemetry/opentelemetry-operator/issues/2542 for details.
+  
+
+### 💡 Enhancements 💡
+
+- `operator`: Expose watch-namespace scope via the `--watch-namespace` CLI flag and the `watch-namespace` config file field. The `WATCH_NAMESPACE` environment variable continues to work. (#4379)
+- `auto-instrumentation`: Add `spec.initContainerSecurityContext` to the Instrumentation CRD so users can explicitly set the security context of the auto-instrumentation init containers (Java, NodeJS, Python, DotNet, Apache HTTPD, Nginx). Add `spec.go.securityContext` for overriding the Go sidecar's defaults. (#4894)
+  When unset, existing behavior is preserved — init containers inherit the security context
+  of the first application container being instrumented, and the Go sidecar keeps the hardcoded
+  defaults required for eBPF (Privileged, RunAsUser: 0). Setting either field explicitly lets
+  restricted PSA environments declare the exact capabilities they want.
+  
+- `auto-instrumentation`: Allow instrumentation upgrades to be blocked for versions containing major breaking changes. (#4646, #2542)
+  Some instrumentation upgrades involve major breaking changes. The operator can't help with those, but it can
+  alert the user about them. This change makes this possible. It will also allow us to set the latest version
+  for new Instrumentation resources by default.
+  See https://github.com/open-telemetry/opentelemetry-operator/issues/2542 for the primary example.
+  
+
+### Components
+
+* [OpenTelemetry Collector - v0.150.0](https://github.com/open-telemetry/opentelemetry-collector/releases/tag/v0.150.0)
+* [OpenTelemetry Contrib - v0.150.0](https://github.com/open-telemetry/opentelemetry-collector-contrib/releases/tag/v0.150.0)
+* [Java auto-instrumentation - v1.33.6](https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases/tag/v1.33.6)
+* [.NET auto-instrumentation - v1.15.0](https://github.com/open-telemetry/opentelemetry-dotnet-instrumentation/releases/tag/v1.15.0)
+* [Node.JS - v0.73.0](https://github.com/open-telemetry/opentelemetry-js/releases/tag/experimental%2Fv0.73.0)
+* [Python - v0.61b0](https://github.com/open-telemetry/opentelemetry-python-contrib/releases/tag/v0.61b0)
+* [Go - v0.23.0](https://github.com/open-telemetry/opentelemetry-go-instrumentation/releases/tag/v0.23.0)
+* [ApacheHTTPD - 1.0.4](https://github.com/open-telemetry/opentelemetry-cpp-contrib/releases/tag/webserver%2Fv1.0.4)
+* [Nginx - 1.0.4](https://github.com/open-telemetry/opentelemetry-cpp-contrib/releases/tag/webserver%2Fv1.0.4)
+
 ## 0.149.0
 
 ### 💡 Enhancements 💡

.chloggen/4894-instrumentation-securitycontext.yaml

@@ -48,11 +48,11 @@ The operator should be released within a week after the [OpenTelemetry collector
 
 | Version  | Release manager |
 |----------|-----------------|
-| v0.150.0 | @pavolloffay    |
 | v0.151.0 | @swiatekm       |
 | v0.152.0 | @iblancasa      |
 | v0.153.0 | @atoulme        |
 | v0.154.0 | @jaronoff97     |
 | v0.155.0 | @yuriolisa      |
 | v0.156.0 | @TylerHelmuth   |
 | v0.157.0 | @frzifus        |
+| v0.158.0 | @pavolloffay    |

.chloggen/feat_blocked-upgrades.yaml

@@ -99,13 +99,13 @@ metadata:
     categories: Logging & Tracing,Monitoring,Observability
     certified: "false"
     containerImage: ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator
-    createdAt: "2026-04-25T03:41:46Z"
+    createdAt: "2026-04-27T14:53:29Z"
     description: Provides the OpenTelemetry components, including the Collector
     operators.operatorframework.io/builder: operator-sdk-v1.29.0
     operators.operatorframework.io/project_layout: go.kubebuilder.io/v3
     repository: github.com/open-telemetry/opentelemetry-operator
     support: OpenTelemetry Community
-  name: opentelemetry-operator.v0.149.0
+  name: opentelemetry-operator.v0.150.0
   namespace: placeholder
 spec:
   apiservicedefinitions: {}
@@ -573,7 +573,7 @@ spec:
                   value: "true"
                 - name: ENABLE_NGINX_AUTO_INSTRUMENTATION
                   value: "true"
-                image: ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.149.0
+                image: ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.150.0
                 livenessProbe:
                   httpGet:
                     path: /healthz
@@ -658,7 +658,7 @@ spec:
   minKubeVersion: 1.25.0
   provider:
     name: OpenTelemetry Community
-  version: 0.149.0
+  version: 0.150.0
   webhookdefinitions:
   - admissionReviewVersions:
     - v1alpha1

.chloggen/feat_upgrade-default-dotnet-instrumentation.yaml

@@ -99,13 +99,13 @@ metadata:
     categories: Logging & Tracing,Monitoring,Observability
     certified: "false"
     containerImage: ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator
-    createdAt: "2026-04-25T03:41:47Z"
+    createdAt: "2026-04-27T14:53:29Z"
     description: Provides the OpenTelemetry components, including the Collector
     operators.operatorframework.io/builder: operator-sdk-v1.29.0
     operators.operatorframework.io/project_layout: go.kubebuilder.io/v3
     repository: github.com/open-telemetry/opentelemetry-operator
     support: OpenTelemetry Community
-  name: opentelemetry-operator.v0.149.0
+  name: opentelemetry-operator.v0.150.0
   namespace: placeholder
 spec:
   apiservicedefinitions: {}
@@ -591,7 +591,7 @@ spec:
                   value: "true"
                 - name: TLS_CONFIGURE_OPERANDS
                   value: "true"
-                image: ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.149.0
+                image: ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.150.0
                 livenessProbe:
                   httpGet:
                     path: /healthz
@@ -683,7 +683,7 @@ spec:
   minKubeVersion: 1.25.0
   provider:
     name: OpenTelemetry Community
-  version: 0.149.0
+  version: 0.150.0
   webhookdefinitions:
   - admissionReviewVersions:
     - v1alpha1

CHANGELOG.md

@@ -46,6 +46,7 @@ The OpenTelemetry Operator _might_ work on versions outside of the given range,
 
 | OpenTelemetry Operator | Kubernetes     | Cert-Manager | Prometheus-Operator   |
 |------------------------|----------------|--------------|-----------------------|
+| v0.150.0               | v1.25 to v1.35 | v1           | v0.90.1               |
 | v0.149.0               | v1.25 to v1.35 | v1           | v0.90.1               |
 | v0.148.0               | v1.25 to v1.35 | v1           | v0.89.0               |
 | v0.147.0               | v1.25 to v1.35 | v1           | v0.89.0               |

RELEASE.md

@@ -2,16 +2,16 @@
 # by default with the OpenTelemetry Operator. This would usually be the latest
 # stable OpenTelemetry version. When you update this file, make sure to update the
 # the docs as well.
-opentelemetry-collector=0.149.0
+opentelemetry-collector=0.150.1
 
 # Represents the current release of the OpenTelemetry Operator.
-operator=0.149.0
+operator=0.150.0
 
 # Represents the current release of the Target Allocator.
-targetallocator=0.149.0
+targetallocator=0.150.0
 
 # Represents the current release of the Operator OpAMP Bridge.
-operator-opamp-bridge=0.149.0
+operator-opamp-bridge=0.150.0
 
 # Represents the current release of Java instrumentation.
 # This version should not be greater than 1.x.x.