README.mdのSDKバージョンを5.34.2に更新し、requirements.txtにおいてgradioのバージョンを5.34.2に固定しました。また、依存関係のコメントを整理しました。

README.md

@@ -4,7 +4,7 @@ emoji: 🎬
 colorFrom: purple
 colorTo: pink
 sdk: gradio
-sdk_version: 4.0.0
+sdk_version: 5.34.2
 app_file: app.py
 pinned: false
 license: apache-2.0

requirements.txt

@@ -1,7 +1,9 @@
-# Wan2.1 VACE dependencies
+# Core dependencies - Install torch first
 torch==2.5.1
 torchvision==0.20.1
-gradio>=3.46,<4
+
+# Wan2.1 VACE dependencies
+gradio==5.34.2
 fastapi>=0.111
 uvicorn>=0.30
 huggingface-hub>=0.22
@@ -18,5 +20,6 @@ imageio>=2.31.0
 imageio-ffmpeg>=0.4.8
 
 # Wan2.1 and VACE implementations from GitHub
+# Note: These require torch to be installed first
 git+https://github.com/Wan-Video/Wan2.1.git#egg=wan
-git+https://github.com/ali-vilab/VACE.git#egg=VACE 
+git+https://github.com/ali-vilab/VACE.git#egg=VACE

エラーログ.md

@@ -0,0 +1,200 @@
+build error
+Job failed with exit code: 1
+Build logs:
+
+===== Build Queued at 2025-06-21 05:12:08 / Commit SHA: 725a76b =====
+
+--> FROM docker.io/nvidia/cuda:12.3.2-cudnn9-devel-ubuntu22.04@sha256:fb1ad20f2552f5b3aafb2c9c478ed57da95e2bb027d15218d7a55b3a0e4b4413
+DONE 0.0s
+
+--> RUN pyenv install 3.10 && 	pyenv global 3.10 && 	pyenv rehash
+CACHED
+
+--> RUN apt-get update && apt-get install -y 	git rsync 	make build-essential libssl-dev zlib1g-dev 	libbz2-dev libreadline-dev libsqlite3-dev wget curl llvm 	libncursesw5-dev xz-utils tk-dev libxml2-dev libxmlsec1-dev libffi-dev liblzma-dev git-lfs  	ffmpeg libsm6 libxext6 cmake libgl1-mesa-glx 	&& rm -rf /var/lib/apt/lists/* 	&& git lfs install
+CACHED
+
+--> RUN curl https://pyenv.run | bash
+CACHED
+
+--> COPY --chown=1000:1000 --from=root / /
+CACHED
+
+--> RUN apt-get update && apt-get install -y fakeroot &&     mv /usr/bin/apt-get /usr/bin/.apt-get &&     echo '#!/usr/bin/env sh\nfakeroot /usr/bin/.apt-get $@' > /usr/bin/apt-get &&     chmod +x /usr/bin/apt-get && 	rm -rf /var/lib/apt/lists/* && 	useradd -m -u 1000 user
+CACHED
+
+--> WORKDIR /home/user/app
+CACHED
+
+--> RUN pip install --no-cache-dir pip -U && 	pip install --no-cache-dir 	datasets 	"huggingface-hub>=0.19" "hf_xet>=1.0.0,<2.0.0" "hf-transfer>=0.1.4" "protobuf<4" "click<8.1" "pydantic~=1.0"
+CACHED
+
+--> Restoring cache
+DONE 32.0s
+
+--> RUN --mount=target=/tmp/requirements.txt,source=requirements.txt     pip install --no-cache-dir -r /tmp/requirements.txt
+Collecting wan (from -r /tmp/requirements.txt (line 21))
+  Cloning https://github.com/Wan-Video/Wan2.1.git to /tmp/pip-install-mzrtr4nt/wan_79792b569ac3421fb975d517f637b636
+  Running command git clone --filter=blob:none --quiet https://github.com/Wan-Video/Wan2.1.git /tmp/pip-install-mzrtr4nt/wan_79792b569ac3421fb975d517f637b636
+  Resolved https://github.com/Wan-Video/Wan2.1.git to commit 8f7f6514f11d852811cee72a17b574633bcdac44
+  Installing build dependencies: started
+  Installing build dependencies: finished with status 'done'
+  Getting requirements to build wheel: started
+  Getting requirements to build wheel: finished with status 'done'
+  Preparing metadata (pyproject.toml): started
+  Preparing metadata (pyproject.toml): finished with status 'done'
+Collecting VACE (from -r /tmp/requirements.txt (line 22))
+  Cloning https://github.com/ali-vilab/VACE.git to /tmp/pip-install-mzrtr4nt/vace_4b819f0b5f554e25bfd7c6ab3624ac74
+  Running command git clone --filter=blob:none --quiet https://github.com/ali-vilab/VACE.git /tmp/pip-install-mzrtr4nt/vace_4b819f0b5f554e25bfd7c6ab3624ac74
+  Resolved https://github.com/ali-vilab/VACE.git to commit 0897c6d055d7d9ea9e191dce763006664d9780f8
+  Installing build dependencies: started
+  Installing build dependencies: finished with status 'done'
+  Getting requirements to build wheel: started
+  Getting requirements to build wheel: finished with status 'done'
+  Preparing metadata (pyproject.toml): started
+  Preparing metadata (pyproject.toml): finished with status 'done'
+Collecting torch==2.5.1 (from -r /tmp/requirements.txt (line 2))
+  Downloading torch-2.5.1-cp310-cp310-manylinux1_x86_64.whl.metadata (28 kB)
+Collecting torchvision==0.20.1 (from -r /tmp/requirements.txt (line 3))
+  Downloading torchvision-0.20.1-cp310-cp310-manylinux1_x86_64.whl.metadata (6.1 kB)
+Collecting gradio<4,>=3.46 (from -r /tmp/requirements.txt (line 4))
+  Downloading gradio-3.50.2-py3-none-any.whl.metadata (17 kB)
+Collecting fastapi>=0.111 (from -r /tmp/requirements.txt (line 5))
+  Downloading fastapi-0.115.13-py3-none-any.whl.metadata (27 kB)
+Collecting uvicorn>=0.30 (from -r /tmp/requirements.txt (line 6))
+  Downloading uvicorn-0.34.3-py3-none-any.whl.metadata (6.5 kB)
+Requirement already satisfied: huggingface-hub>=0.22 in /home/user/.pyenv/versions/3.10.18/lib/python3.10/site-packages (from -r /tmp/requirements.txt (line 7)) (0.33.0)
+Requirement already satisfied: numpy>=1.24.0 in /home/user/.pyenv/versions/3.10.18/lib/python3.10/site-packages (from -r /tmp/requirements.txt (line 8)) (2.2.6)
+Collecting opencv-python>=4.8.0 (from -r /tmp/requirements.txt (line 9))
+  Downloading opencv_python-4.11.0.86-cp37-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl.metadata (20 kB)
+Collecting Pillow>=10.0.0 (from -r /tmp/requirements.txt (line 10))
+  Downloading pillow-11.2.1-cp310-cp310-manylinux_2_28_x86_64.whl.metadata (8.9 kB)
+Requirement already satisfied: tqdm>=4.65.0 in /home/user/.pyenv/versions/3.10.18/lib/python3.10/site-packages (from -r /tmp/requirements.txt (line 11)) (4.67.1)
+Collecting transformers>=4.30.0 (from -r /tmp/requirements.txt (line 12))
+  Downloading transformers-4.52.4-py3-none-any.whl.metadata (38 kB)
+Collecting accelerate>=0.20.0 (from -r /tmp/requirements.txt (line 13))
+  Downloading accelerate-1.8.1-py3-none-any.whl.metadata (19 kB)
+Collecting safetensors>=0.3.1 (from -r /tmp/requirements.txt (line 14))
+  Downloading safetensors-0.5.3-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl.metadata (3.8 kB)
+Collecting einops>=0.7.0 (from -r /tmp/requirements.txt (line 15))
+  Downloading einops-0.8.1-py3-none-any.whl.metadata (13 kB)
+Collecting omegaconf>=2.3.0 (from -r /tmp/requirements.txt (line 16))
+  Downloading omegaconf-2.3.0-py3-none-any.whl.metadata (3.9 kB)
+Collecting imageio>=2.31.0 (from -r /tmp/requirements.txt (line 17))
+  Downloading imageio-2.37.0-py3-none-any.whl.metadata (5.2 kB)
+Collecting imageio-ffmpeg>=0.4.8 (from -r /tmp/requirements.txt (line 18))
+  Downloading imageio_ffmpeg-0.6.0-py3-none-manylinux2014_x86_64.whl.metadata (1.5 kB)
+Collecting diffusers>=0.31.0 (from wan->-r /tmp/requirements.txt (line 21))
+  Downloading diffusers-0.33.1-py3-none-any.whl.metadata (19 kB)
+Collecting tokenizers>=0.20.3 (from wan->-r /tmp/requirements.txt (line 21))
+  Downloading tokenizers-0.21.1-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl.metadata (6.8 kB)
+Collecting easydict (from wan->-r /tmp/requirements.txt (line 21))
+  Downloading easydict-1.13-py3-none-any.whl.metadata (4.2 kB)
+Collecting ftfy (from wan->-r /tmp/requirements.txt (line 21))
+  Downloading ftfy-6.3.1-py3-none-any.whl.metadata (7.3 kB)
+Collecting dashscope (from wan->-r /tmp/requirements.txt (line 21))
+  Downloading dashscope-1.23.5-py3-none-any.whl.metadata (6.8 kB)
+Collecting flash_attn (from wan->-r /tmp/requirements.txt (line 21))
+  Downloading flash_attn-2.8.0.post2.tar.gz (7.9 MB)
+     ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 7.9/7.9 MB 272.7 MB/s eta 0:00:00
+  Installing build dependencies: started
+  Installing build dependencies: finished with status 'done'
+  Getting requirements to build wheel: started
+  Getting requirements to build wheel: finished with status 'error'
+  error: subprocess-exited-with-error
+  
+  × Getting requirements to build wheel did not run successfully.
+  │ exit code: 1
+  ╰─> [17 lines of output]
+      Traceback (most recent call last):
+        File "/home/user/.pyenv/versions/3.10.18/lib/python3.10/site-packages/pip/_vendor/pyproject_hooks/_in_process/_in_process.py", line 389, in <module>
+          main()
+        File "/home/user/.pyenv/versions/3.10.18/lib/python3.10/site-packages/pip/_vendor/pyproject_hooks/_in_process/_in_process.py", line 373, in main
+          json_out["return_val"] = hook(**hook_input["kwargs"])
+        File "/home/user/.pyenv/versions/3.10.18/lib/python3.10/site-packages/pip/_vendor/pyproject_hooks/_in_process/_in_process.py", line 143, in get_requires_for_build_wheel
+          return hook(config_settings)
+        File "/tmp/pip-build-env-e65_ay7c/overlay/lib/python3.10/site-packages/setuptools/build_meta.py", line 331, in get_requires_for_build_wheel
+          return self._get_build_requires(config_settings, requirements=[])
+        File "/tmp/pip-build-env-e65_ay7c/overlay/lib/python3.10/site-packages/setuptools/build_meta.py", line 301, in _get_build_requires
+          self.run_setup()
+        File "/tmp/pip-build-env-e65_ay7c/overlay/lib/python3.10/site-packages/setuptools/build_meta.py", line 512, in run_setup
+          super().run_setup(setup_script=setup_script)
+        File "/tmp/pip-build-env-e65_ay7c/overlay/lib/python3.10/site-packages/setuptools/build_meta.py", line 317, in run_setup
+          exec(code, locals())
+        File "<string>", line 22, in <module>
+      ModuleNotFoundError: No module named 'torch'
+      [end of output]
+  
+  note: This error originates from a subprocess, and is likely not a problem with pip.
+error: subprocess-exited-with-error
+
+× Getting requirements to build wheel did not run successfully.
+│ exit code: 1
+╰─> See above for output.
+
+note: This error originates from a subprocess, and is likely not a problem with pip.
+
+--> ERROR: process "/bin/sh -c pip install --no-cache-dir -r /tmp/requirements.txt" did not complete successfully: exit code: 1
+
+
+=========
+追加で、Your Space is using an old version of Gradio (4.0.0) that is subject to security vulnerabilities. Please update to the latest version.のエラーが出ています。
+
+
+⚠️警告（「Gradio 4.0.0 は脆弱」）の原因
+	•	Space が標準イメージに同梱した Gradio 4.0.0 を優先
+（pip install gradio==4.0.0 が自動実行されている）
+	•	我々の requirements.* に 「== バージョン固定」 が無く、インストール順が逆転した結果、古い 4.0.0 が残った。
+
+⸻
+
+✅ 修正内容（5 分で完了）
+
+ファイル	変更点	コマンド例
+requirements.lock.txt	gradio==5.34.2 を明示（2025-06-19 リリース最新）	text\ngradio==5.34.2\n
+Dockerfile（使っている場合）	pip install gradio==5.34.2 を PyTorchの後 に追加	dockerfile\nRUN pip install --no-cache-dir gradio==5.34.2\n
+hf.yaml（ある場合のみ）	変更不要	
+
+ポイント
+	•	Gradio 5 は 4.x と互換 API（Blocks, Row, Tab, mount_gradio_app など）を保持。既存コードはそのまま動きます。
+	•	Spaces は Node 20 がプリインストールされているため、Gradio 5 の SSR モードも自動で有効になり���す（設定不要）。
+
+⸻
+
+🔄 手順
+	1.	requirements.lock.txt を編集
+
+sed -i 's/^gradio.*/gradio==5.34.2/' requirements.lock.txt
+
+
+	2.	（Dockerfile 利用時） 依存インストール行を追加／更新
+
+RUN pip install --no-cache-dir gradio==5.34.2
+
+
+	3.	git add & push
+
+git add requirements.lock.txt Dockerfile
+git commit -m "fix: pin gradio 5.34.2 for security"
+git push
+
+
+	4.	Space が Rebuild → 成功
+	•	ビルドログ冒頭に Collecting gradio==5.34.2 が出れば OK
+	•	起動後、警告は消えます。
+
+⸻
+
+📝 検証スクリプト（起動時に一度だけ実行）
+
+import gradio as gr, sys
+assert gr.__version__ == "5.34.2", f"wrong gradio {gr.__version__}"
+print("✅ Gradio 5.34.2 loaded OK")
+sys.exit()
+
+
+⸻
+
+参考: 最新版確認ソース
+	•	Gradio 5.34.2 は 2025-06-19 の PyPI 最新安定版  
+
+これで 脆弱性警告は完全に解消 します。