diff --git a/.github/docker-images.txt b/.github/docker-images.txt
index 49ad036..9d1f87b 100644
--- a/.github/docker-images.txt
+++ b/.github/docker-images.txt
@@ -2,7 +2,7 @@
 # (tests/images.py) and CI pulls every line, so each tag is declared once.
 # One image:tag per line; '#' comments and blank lines are ignored. The library
 # defaults stay the floating latest tag of each image.
-floci/floci:2.2.0
-floci/floci-az:0.14.0
-floci/floci-gcp:0.10.0
-floci/floci-oci:0.4.2
+floci/floci:2.3.0
+floci/floci-az:0.15.0
+floci/floci-gcp:0.11.0
+floci/floci-oci:0.5.0
diff --git a/tests/test_oci.py b/tests/test_oci.py
index ab0b0f2..977dab6 100644
--- a/tests/test_oci.py
+++ b/tests/test_oci.py
@@ -490,7 +490,10 @@ def test_the_emulator_reads_the_tenancy_from_the_signature(floci: FlociOciContai
 
     other_tenancy = "ocid1.tenancy.oc1..othertenancy" + uuid.uuid4().hex
     other = object_storage(floci, {**floci.get_config(), "tenancy": other_tenancy})
-    listed = other.list_buckets(floci.get_namespace(), other_tenancy).data
+    # Each tenancy has its own namespace, and the emulator answers 404 for anyone else's.
+    other_namespace = other.get_namespace().data
+    assert other_namespace != floci.get_namespace()
+    listed = other.list_buckets(other_namespace, other_tenancy).data
     assert bucket not in [b.name for b in listed]
 
     # An unsigned request falls back to the default tenancy, the one the helpers sign as.