release v2026.05.18

mihomo:    v1.19.25 → v1.19.25
sing-box:  v1.13.12 → v1.13.12
xray-core: v1.260327.0 → v1.260327.0

Author: github-actions[bot]

Package.swift

@@ -1,14 +1,9 @@
 // swift-tools-version:5.9
 //
-// `main` ships with a local `binaryTarget(path:)` so the package
-// resolves directly against the on-disk xcframework — run
-// `Scripts/build.sh` once, then `.package(path: "../EverywhereCore")`
-// works in both consuming apps without a network round-trip.
-//
-// `Scripts/release.sh vX.Y.Z` rewrites this file to use
-// `binaryTarget(url:, checksum:)` on the tagged commit only, then
-// restores this version on `main`. Tagged consumers resolve against
-// the GitHub Release asset; `main` consumers stay on the local path.
+// Auto-generated for the v2026.05.18 release by
+// .github/workflows/upstream-watch.yml. The `main` branch
+// keeps a local `binaryTarget(path:)` variant for in-tree
+// development; this variant lives only on the tag.
 
 import PackageDescription
 
@@ -22,6 +17,10 @@ let package = Package(
         .library(name: "EverywhereCore", targets: ["EverywhereCore"]),
     ],
     targets: [
-        .binaryTarget(name: "EverywhereCore", path: "EverywhereCore.xcframework"),
+        .binaryTarget(
+            name: "EverywhereCore",
+            url: "https://github.com/NodePassProject/EverywhereCore/releases/download/v2026.05.18/EverywhereCore-v2026.05.18.xcframework.zip",
+            checksum: "90ec535ad46ff8ac7ba3b304f2c7b0ea6cfdfcb1a57a8511032cbbafe640dfa2"
+        ),
     ]
-)
+)