Track taint for String.valueOf(..) - #6382

This blanket inclusion of all the overloads deserve at least some investigation prior to merging. The char[] overloads are perfectly fine to include, but the ones for primitive types perhaps less so, and the one for Object should be considered together with general toString() and its impact on performance and FP-rates should be looked into prior to merging.

Thanks for the feedback @aschackmull - updated the PR accordingly and left out the valueOf(Object) variant for now. If you think it we should look into this right away, I'd need some help to gauge the implications of doing that.

And related to that: Do you think an addition like this is worth a change note?

Do you think an addition like this is worth a change note?

No, this is too minor.

Also, the expected file needs an update.

Thanks. And sorry for the missing expected file, that was still lurking in my unstaged changes :)