Fix Space build: pin full dependency chain to resolve pip resolver failure

qwen-asr leaves several transitive deps unpinned (librosa, qwen-omni-utils,
flask, sox, pytz), which combined with our own loose torch/numpy bounds
made pip's resolver back-track across a huge version matrix and hit
"Dependency resolution exceeded maximum depth". Pin the whole chain to
exact, verified-compatible versions instead.

This also surfaced two real incompatibilities, fixed by pinning:
- gradio>=6.18.0 requires huggingface-hub>=1.2.0, which conflicts with
transformers==4.57.6 (hard-pinned by qwen-asr, needs huggingface-hub<1.0).
Capped sdk_version/gradio at 6.17.3.
- soynlp==0.0.493 (hard-pinned by qwen-asr) fails to build on Python 3.12+.
Pinned Space python_version to 3.11.

Verified with `pip install --dry-run` against HF's exact injected build
constraints, and a real `python app.py` smoke test on the pinned versions.

README.md

@@ -4,8 +4,8 @@ emoji: 🎯
 colorFrom: blue
 colorTo: purple
 sdk: gradio
-sdk_version: 6.20.0
-python_version: '3.12'
+sdk_version: 6.17.3
+python_version: '3.11'
 app_file: app.py
 pinned: false
 license: apache-2.0
@@ -59,8 +59,11 @@ Portuguese, Russian, Spanish, Vietnamese.
 
 ### Local development
 
+Use Python 3.10 or 3.11 — `soynlp` (a transitive dependency pulled in by
+`qwen-asr`) fails to build on 3.12+.
+
 ```bash
-python -m venv .venv && source .venv/bin/activate
+python3.11 -m venv .venv && source .venv/bin/activate
 pip install -e .
 python app.py
 ```

pyproject.toml

@@ -3,14 +3,24 @@ name = "qwen3-force-aligner-space"
 version = "0.1.0"
 description = "Gradio Space wrapping Qwen3-ForcedAligner-0.6B for text-audio forced alignment"
 readme = "README.md"
-requires-python = ">=3.10,<3.14"
+# Capped at <3.12: soynlp==0.0.493 (a hard pin of qwen-asr) fails to build
+# on Python 3.12+. See requirements.txt for the full explanation.
+requires-python = ">=3.10,<3.12"
 license = { text = "Apache-2.0" }
 dependencies = [
-    "gradio>=5.0",
-    "qwen-asr>=0.0.6",
-    "torch>=2.3",
-    "numpy>=1.26",
-    "soundfile>=0.12",
+    # gradio must stay <6.18.0 (huggingface-hub conflict with transformers
+    # via qwen-asr) — see requirements.txt for details. Matches README.md's
+    # sdk_version.
+    "gradio==6.17.3",
+    "qwen-asr==0.0.6",
+    "torch==2.11.0",
+    "numpy==2.4.6",
+    "soundfile==0.14.0",
+    "librosa==0.11.0",
+    "qwen-omni-utils==0.0.9",
+    "flask==3.1.3",
+    "sox==1.5.0",
+    "pytz==2026.2",
 ]
 
 [project.optional-dependencies]

requirements.txt

@@ -1,7 +1,31 @@
 # This is what the Hugging Face Space build actually installs (Spaces read
 # requirements.txt, not pyproject.toml). Keep in sync with pyproject.toml.
-gradio>=5.0
-qwen-asr>=0.0.6
-torch>=2.3
-numpy>=1.26
-soundfile>=0.12
+#
+# gradio itself is intentionally NOT pinned here: the Space builder already
+# installs the exact `sdk_version` from README.md's frontmatter, and adding
+# a second, looser requirement for it here only grows the resolver's search
+# space.
+#
+# qwen-asr's own metadata leaves several transitive deps unpinned
+# (librosa, qwen-omni-utils, flask, sox, pytz), which combined with a bare
+# numpy/torch requirement makes pip's resolver back-track across a huge
+# version matrix and fail with "Dependency resolution exceeded maximum
+# depth". Pinning the whole chain to exact, known-mutually-compatible
+# versions keeps the search space small.
+#
+# Two constraints this pins around, verified with `pip install --dry-run`:
+#   - gradio must stay <6.18.0: 6.18.0+ requires huggingface-hub>=1.2.0,
+#     which conflicts with transformers==4.57.6 (pinned by qwen-asr, needs
+#     huggingface-hub<1.0). README.md's sdk_version is pinned to 6.17.3
+#     to match — bump both together or not at all.
+#   - Space python_version must stay 3.11 (see README.md): soynlp==0.0.493
+#     (pinned by qwen-asr) fails to build on Python 3.12+.
+torch==2.11.0
+numpy==2.4.6
+soundfile==0.14.0
+librosa==0.11.0
+qwen-omni-utils==0.0.9
+flask==3.1.3
+sox==1.5.0
+pytz==2026.2
+qwen-asr==0.0.6