I think I've found something. I've looked into APKINDEX before the package is cached and after. ProGet is definetelly doing something to it.
I thing, that after caching package ProGet wrongly calculate C filed inside APKINDEX file (which is file checksum according to https://wiki.alpinelinux.org/wiki/Apk_spec).
Here is an example:
C:Q1UIflJfipsQ/A/h2DPh9PCYwROC8=
P:musl-dev
V:1.2.3-r5
A:x86_64
S:3225228
I:10346496
T:the musl c library (libc) implementation (development files)
U:https://musl.libc.org/
L:MIT
o:musl
m:Timo Teräs <timo.teras@iki.fi>
t:1684510151
c:b12380f8608f8cdd44347db413e8937ac4a5565b
D:musl=1.2.3-r5
-
Before package was cached (no single download from feed):
C: Q1UIflJfipsQ/A/h2DPh9PCYwROC8= -
Original value from official Alpine repo (which matches C returned by ProGet):
C: Q1UIflJfipsQ/A/h2DPh9PCYwROC8= -
After package was cached (downloaded from feed):
C:y3bwudQn8ZsMwZJVfU44wZ5WQFw=
As you can see, the checksum is being changed even the package itself is still exact the same file. This is definitely a bug.