Hi @wechselberg-nisboerge_3629,
In ProGet, the maven metadata files (xml, hash) are indeed generated upon request. The output is deterministic, based on the artifacts in storage and (if relevant) in the remote repository (i.e. connectors). So, if you're seeing it changed, it's because an artifact was uploaded/etc.
One thing to note -- you cannot upload a metadata file or hash file. Well, you can try (and maven tries) to PUT the file, but the stream is always ignored or "written to /dev/null" as they say.
We've seen some maven workflows/plugins that attempt to modify/append to this metadata file and re-upload it with changes.
Thanks,
Alana