lgtm,codescanning
* The query "Uncontrolled data used in path expression" (`java/path-injection`) has been
  improved to recognize more path creation entry points.