Merge pull request #9170 from glaubinix/f/composer-repository-withou-sha1-include

ComposerRepository: avoid notice if includes do not provide a sha1

src/Composer/Repository/ComposerRepository.php

@@ -637,7 +637,7 @@ class ComposerRepository extends ArrayRepository implements ConfigurableReposito
 
         if (isset($data['includes'])) {
             foreach ($data['includes'] as $include => $metadata) {
-                if ($this->cache->sha1($include) === $metadata['sha1']) {
+                if (isset($metadata['sha1']) && $this->cache->sha1($include) === $metadata['sha1']) {
                     $includedData = json_decode($this->cache->read($include), true);
                 } else {
                     $includedData = $this->fetchFile($include);