Search papers, labs, and topics across Lattice.
This paper introduces DepRepair, a novel LLM-based approach for repairing consumer code affected by breaking changes in third-party libraries, addressing a significant gap in existing methods that fail to produce verified patches. By leveraging structured upstream evidence, including release notes and API diffs, DepRepair effectively identifies affected code sections and tailors repairs according to the type of breaking change. Evaluated on the DepBench benchmark, DepRepair achieved an impressive executable pass rate of 89.5% with GPT-5.5, highlighting the importance of structured evidence in enhancing repair accuracy compared to raw upstream data.
Structured evidence from upstream sources boosts LLM repair accuracy by up to 23 percentage points, revolutionizing how we adapt to breaking changes in software dependencies.
Modern software projects depend on numerous third-party libraries, whose updates often introduce breaking changes. Adapting consumer code to such changes remains labor-intensive and error-prone. Existing work either characterizes dependency breaking changes without producing a verified consumer-side patch, or studies automated repair only in settings where the failure and repair context are contained within the target repository. However, dependency breaking changes violate this assumption: the decisive repair evidence lies upstream in release notes and API diffs, and no failing test localizes where the consumer breaks, leaving the repair under-informed. To study this cross-repository problem on real data, we introduce DepBench, a benchmark of 95 real-world dependency-update instances across four ecosystems, each paired with a Docker-based executable oracle that runs the consumer's own tests. To address these challenges, we propose DepRepair, a single-call LLM approach that grounds repair in structured upstream evidence through three components: an evidence filter that distills relevant upstream changes, a usage locator that identifies affected consumer sites, and a subcategory-aware guide that tailors repairs to the breaking-change type. Evaluated on DepBench, DepRepair attains the highest executable pass rate on each backbone, achieving 89.5% with GPT-5.5 and 82.1% with Claude Opus 4.6. We further find that raw upstream evidence reduces LLM and agent pass rates by 7--23 percentage points, whereas structured evidence consistently improves them.
