diff --git a/CHANGELOG.md b/CHANGELOG.md
index 18421b2..22b0c5e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,16 @@ The format is based on [Keep a Changelog](http://keepachangelog.com/) and this p
 
 ## [unreleased](https://github.com/uzh/guardian/tree/HEAD)
 
+## [0.3.2](https://github.com/uzh/guardian/tree/0.3.2) - 2024-03-21
+
+### Changed
+
+- use string preprocessor instead of defining and using sql functions
+
+### Deprecated
+
+- database `start` function, as no functions need to be defined anymore
+
 ## [0.3.1](https://github.com/uzh/guardian/tree/0.3.1) - 2024-01-22
 
 ### Added
diff --git a/dune-project b/dune-project
index ee50009..ebea832 100644
--- a/dune-project
+++ b/dune-project
@@ -4,7 +4,7 @@
 
 (name guardian)
 
-(version 0.3.1)
+(version 0.3.2)
 
 (license GPL-2.0-or-later)
 
diff --git a/guardian.opam b/guardian.opam
index 8f0f2fb..c81bbb8 100644
--- a/guardian.opam
+++ b/guardian.opam
@@ -1,6 +1,6 @@
 # This file is generated by dune, edit dune-project instead
 opam-version: "2.0"
-version: "0.3.1"
+version: "0.3.2"
 synopsis: "Role-based access control for OCaml"
 description:
   "Defined actors can access targets according to specified rules (allowed actions: CRUD)."
diff --git a/guardian.opam.locked b/guardian.opam.locked
index 1aa45a9..5a9d00d 100644
--- a/guardian.opam.locked
+++ b/guardian.opam.locked
@@ -1,5 +1,5 @@
 opam-version: "2.0"
-version: "0.3.0"
+version: "0.3.2"
 synopsis: "Role-based access control for OCaml"
 description:
   "Defined actors can access targets according to specified rules (allowed actions: CRUD)."
@@ -13,30 +13,43 @@ doc: "https://uzh.github.io/guardian"
 bug-reports: "https://github.com/uzh/guardian/issues"
 depends: [
   "angstrom" {= "0.16.0"}
+  "asn1-combinators" {= "0.2.6"}
   "base" {= "v0.16.3"}
   "base-bytes" {= "base"}
   "base-threads" {= "base"}
   "base-unix" {= "base"}
+  "base64" {= "3.5.1"}
   "bigarray-compat" {= "1.1.0"}
   "bigstringaf" {= "0.9.1"}
-  "caqti" {= "2.0.1"}
-  "caqti-driver-mariadb" {= "2.0.1"}
-  "caqti-lwt" {= "2.0.1"}
+  "caqti" {= "2.1.1"}
+  "caqti-driver-mariadb" {= "2.1.1"}
+  "caqti-lwt" {= "2.1.1"}
   "cmdliner" {= "1.2.0"}
+  "conf-bash" {= "1"}
   "conf-gcc" {= "1.0"}
+  "conf-gmp" {= "4"}
+  "conf-gmp-powm-sec" {= "3"}
   "conf-mariadb" {= "2"}
   "conf-pkg-config" {= "3"}
   "containers" {= "3.13.1"}
   "containers-data" {= "3.13.1"}
   "cppo" {= "1.6.9"}
   "csexp" {= "1.5.2"}
+  "cstruct" {= "6.2.0"}
   "ctypes" {= "0.20.2"}
   "domain-name" {= "0.4.0"}
-  "dune" {= "3.12.2"}
-  "dune-configurator" {= "3.12.2"}
+  "dune" {= "3.14.2"}
+  "dune-configurator" {= "3.14.2"}
+  "dune-private-libs" {= "3.14.2"}
+  "dune-site" {= "3.14.2"}
+  "duration" {= "0.2.1"}
+  "dyn" {= "3.14.2"}
   "either" {= "1.0.0"}
+  "eqaf" {= "0.9"}
   "fieldslib" {= "v0.16.0"}
   "fmt" {= "0.9.0"}
+  "gmap" {= "0.3.0"}
+  "hkdf" {= "1.0.4"}
   "integers" {= "0.7.0"}
   "ipaddr" {= "5.5.0"}
   "logs" {= "0.7.0"}
@@ -45,6 +58,10 @@ depends: [
   "lwt_ppx" {= "2.1.0"}
   "macaddr" {= "5.5.0"}
   "mariadb" {= "1.1.6"}
+  "mirage-crypto" {= "0.11.3"}
+  "mirage-crypto-ec" {= "0.11.3"}
+  "mirage-crypto-pk" {= "0.11.3"}
+  "mirage-crypto-rng" {= "0.11.3"}
   "mtime" {= "2.0.0"}
   "ocaml" {= "4.14.1"}
   "ocaml-compiler-libs" {= "v0.12.4"}
@@ -52,6 +69,9 @@ depends: [
   "ocamlbuild" {= "0.14.3"}
   "ocamlfind" {= "1.9.6"}
   "ocplib-endian" {= "1.2"}
+  "ordering" {= "3.14.2"}
+  "pbkdf" {= "1.2.0"}
+  "pp" {= "1.2.0"}
   "ppx_base" {= "v0.16.0"}
   "ppx_cold" {= "v0.16.0"}
   "ppx_compare" {= "v0.16.0"}
@@ -64,17 +84,21 @@ depends: [
   "ppx_hash" {= "v0.16.0"}
   "ppx_sexp_conv" {= "v0.16.0"}
   "ppx_string" {= "v0.16.0"}
-  "ppxlib" {= "0.31.0"}
+  "ppxlib" {= "0.32.0"}
   "ptime" {= "1.1.0"}
   "result" {= "1.5"}
   "seq" {= "base"}
   "sexplib0" {= "v0.16.0"}
   "stdlib-shims" {= "0.3.0"}
+  "stdune" {= "3.14.2"}
   "stringext" {= "1.6.0"}
+  "tls" {= "0.17.3"}
   "topkg" {= "1.0.7"}
   "uri" {= "4.4.0"}
   "uuidm" {= "0.9.8"}
+  "x509" {= "0.16.5"}
   "yojson" {= "2.1.2"}
+  "zarith" {= "1.13"}
 ]
 build: [
   ["dune" "subst"] {dev}