diff --git a/src/Composer/Command/BumpCommand.php b/src/Composer/Command/BumpCommand.php
index dc3df1e12..a87a65e1c 100644
--- a/src/Composer/Command/BumpCommand.php
+++ b/src/Composer/Command/BumpCommand.php
@@ -216,7 +216,7 @@ EOT
             $io->write('<info>No requirements to update in '.$composerJsonPath.'.</info>');
         }
 
-        if (!$dryRun && $composer->getLocker()->isLocked() && $changeCount > 0) {
+        if (!$dryRun && $composer->getLocker()->isLocked() && $composer->getConfig()->get('lock') && $changeCount > 0) {
             $composer->getLocker()->updateHash($composerJson);
         }
 
diff --git a/src/Composer/Command/RequireCommand.php b/src/Composer/Command/RequireCommand.php
index 92d0a77b5..59d1e0585 100644
--- a/src/Composer/Command/RequireCommand.php
+++ b/src/Composer/Command/RequireCommand.php
@@ -554,7 +554,7 @@ EOT
 
         if (!$dryRun) {
             $this->updateFile($this->json, $requirements, $requireKey, $removeKey, $sortPackages);
-            if ($locker->isLocked()) {
+            if ($locker->isLocked() && $composer->getConfig()->get('lock')) {
                 $stabilityFlags = RootPackageLoader::extractStabilityFlags($requirements, $composer->getPackage()->getMinimumStability(), []);
                 $locker->updateHash($this->json, function (array $lockData) use ($stabilityFlags) {
                     foreach ($stabilityFlags as $packageName => $flag) {