Problem to solve
As pointed out by dependabot, there are some security vulnerabilities to Flask < 1.0. There are also some benefits related to logging in a concrete implementation of the SAL Server interface when using Flask > 1.0 (it makes it easy to include logs from other sources when using structlog).
Proposal
Check Flask changelog to see if there are any changes which might affect SAL. It would also be beneficial to test switching to 1.0 with a concrete implementation of the SAL server.
What does success look like, and how can we measure that?
Switch to Flask > 1.0 (ideally current stable version).