lgtm,codescanning * Added additional taint steps modeling constructors for collections in `java.util`.