It only updates the expiration date upon automatic renewal by the issuer and after an update a CVV2 reconfirmation is required (unless it’s a recurring transaction, saved account details and recurring transactions are different beasts) since the CVV2 has also been rotated.

Change of PAN due to a new card being issued whether it’s on the request of the costumer, lost or compromised card should not auto-update.