[hossain-rayhan]

Raise all six modules to the patched Go release for GO-2026-6809. Align unit workflows with go.mod and pin the three Go builder images so container binaries receive the fix as well.

[Copilot]

🔵 Needs a closer look

Availability of the pinned Microsoft builder image remains unverified, so successful operator and sidecar container builds need confirmation.

No open issues 🎉

What changed in this PR

Updates Go toolchain requirements and container builders to 1.26.10 to address GO-2026-6809 across the operator, plugins, and test modules.

Changes:

• Raises all six modules from Go 1.26.9 to 1.26.10.
• Pins three container builders to patch-specific Go images.
• Makes unit-test workflows read the operator’s Go version and updates security documentation.

File	Description
test/​shared/​go.mod	Updates the shared test module’s Go requirement.
test/​longhaul/​go.mod	Updates the long-haul module’s Go requirement.
test/​longhaul/​Dockerfile	Pins the Alpine Go builder.
test/​e2e/​go.mod	Updates the end-to-end module’s Go requirement.
operator/​src/​go.mod	Updates the operator’s Go requirement.
operator/​src/​Dockerfile	Pins the Microsoft Go builder.
operator/​cnpg-plugins/​sidecar-injector/​go.mod	Updates the sidecar module’s Go requirement.
operator/​cnpg-plugins/​sidecar-injector/​Dockerfile	Pins the sidecar’s Microsoft Go builder.
documentdb-kubectl-plugin/​go.mod	Updates the kubectl plugin’s Go requirement.
docs/​designs/​image-management.md	Documents the pinned operator builder.
CHANGELOG.md	Records the security update and workflow alignment.
.github/​workflows/​test-unit.yml	Reads Go version from the operator module.
.github/​workflows/​test-unit-coverage.yml	Reads Go version from the operator module.

_{Review effort: Balanced}