I had same issue with dotnet 8. Seems like cookie is only reissued at controllers with authorization check, e.g. with [Authorize] or something like that:

app.MapGet("/hello", () => "Hello world!").RequireAuthorization();

At normal controllers without authorization check it doesn't update cookie.