Flask-Security-Too holds back flask from upgrading

[GustaafL]

When trying to upgrade Flask the flask security package throws errors.

from flexmeasures.data.models.user import (
  File "/home/user/flexmeasures-venv/flexmeasures/flexmeasures/data/models/user.py", line 5, in <module>
    from flask_security import UserMixin, RoleMixin
  File "/home/user/flexmeasures-venv/lib/python3.10/site-packages/flask_security/__init__.py", line 14, in <module>
    from .changeable import admin_change_password
  File "/home/user/flexmeasures-venv/lib/python3.10/site-packages/flask_security/changeable.py", line 15, in <module>
    from flask_login import COOKIE_NAME as REMEMBER_COOKIE_NAME
  File "/home/user/flexmeasures-venv/lib/python3.10/site-packages/flask_login/__init__.py", line 12, in <module>
    from .login_manager import LoginManager
  File "/home/user/flexmeasures-venv/lib/python3.10/site-packages/flask_login/login_manager.py", line 33, in <module>
    from .utils import _create_identifier
  File "/home/user/flexmeasures-venv/lib/python3.10/site-packages/flask_login/utils.py", line 14, in <module>
    from werkzeug.urls import url_decode
ImportError: cannot import name 'url_decode' from 'werkzeug.urls' (/home/user/flexmeasures-venv/lib/python3.10/site-packages/werkzeug/urls.py)

[nhoening]

Is this when going to 2.3?
Maybe stopping to constrain werkzeug would help. See one line further down.