diff --git a/composer.lock b/composer.lock
index b75e457532cd6e923a62c0ab00c223100cb8de22..959558421e8cd141b1c4e05d3b087ed4868fee2b 100644
--- a/composer.lock
+++ b/composer.lock
@@ -457,7 +457,7 @@
             "dist": {
                 "type": "path",
                 "url": "core",
-                "reference": "f8e50d64acdddb816b10f83ca307712bd2cd65e5"
+                "reference": "1135d82ca80e22e7f25b1bd9a8613cae5ae06372"
             },
             "require": {
                 "asm89/stack-cors": "^1.1",
diff --git a/core/tests/Drupal/Tests/ComposerIntegrationTest.php b/core/tests/Drupal/Tests/ComposerIntegrationTest.php
index 860201de8745bc6ee2c9fb863ce23bc209267324..eb5a33d81b66ec1e1155157288c59475d704daf5 100644
--- a/core/tests/Drupal/Tests/ComposerIntegrationTest.php
+++ b/core/tests/Drupal/Tests/ComposerIntegrationTest.php
@@ -21,6 +21,17 @@ public function testComposerLockHash() {
     $content_hash = self::getContentHash(file_get_contents($this->root . '/composer.json'));
     $lock = json_decode(file_get_contents($this->root . '/composer.lock'), TRUE);
     $this->assertSame($content_hash, $lock['content-hash']);
+
+    // @see \Composer\Repository\PathRepository::initialize()
+    $core_content_hash = sha1(file_get_contents($this->root . '/core/composer.json') . serialize([]));
+    $core_lock_file_hash = '';
+    foreach ($lock['packages'] as $package) {
+      if ($package['name'] === 'drupal/core') {
+        $core_lock_file_hash = $package['dist']['reference'];
+        break;
+      }
+    }
+    $this->assertSame($core_content_hash, $core_lock_file_hash);
   }
 
   /**