feat: enhance release workflow with version verification and cleanup on failure

Author: sametcn99

.github/workflows/release.yml

@@ -27,7 +27,6 @@ jobs:
         with:
           node-version: 20
           registry-url: https://registry.npmjs.org
-          always-auth: false
 
       - name: Prepare npm trusted publishing context
         run: |
@@ -67,6 +66,24 @@ jobs:
 
       - name: Publish package with provenance
         run: npm publish --provenance --access public
+        env:
+          NODE_AUTH_TOKEN: ""
+          NPM_TOKEN: ""
+
+      - name: Verify published version on npm registry
+        run: |
+          VERSION="${{ steps.pkg.outputs.version }}"
+          for i in 1 2 3 4 5 6; do
+            PUBLISHED_VERSION=$(npm view vitepress-mermaid-renderer version || true)
+            if [ "$PUBLISHED_VERSION" = "$VERSION" ]; then
+              echo "Verified npm latest=$PUBLISHED_VERSION"
+              exit 0
+            fi
+            echo "Waiting for npm propagation... attempt $i (latest=$PUBLISHED_VERSION, expected=$VERSION)"
+            sleep 10
+          done
+          echo "Published version was not visible on npm after waiting."
+          exit 1
 
       - name: Extract release notes from changelog
         run: |
@@ -90,3 +107,41 @@ jobs:
           tag_name: ${{ steps.pkg.outputs.tag }}
           name: ${{ steps.pkg.outputs.tag }}
           body_path: RELEASE_NOTES.md
+
+      - name: Cleanup release and tag on failure
+        if: failure() && steps.pkg.outputs.tag != ''
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const tag = "${{ steps.pkg.outputs.tag }}";
+            const owner = context.repo.owner;
+            const repo = context.repo.repo;
+
+            // Delete release if it exists.
+            try {
+              const release = await github.rest.repos.getReleaseByTag({
+                owner,
+                repo,
+                tag,
+              });
+              await github.rest.repos.deleteRelease({
+                owner,
+                repo,
+                release_id: release.data.id,
+              });
+              core.info(`Deleted release for tag ${tag}`);
+            } catch (error) {
+              core.info(`No release to delete for tag ${tag}: ${error.message}`);
+            }
+
+            // Delete git tag ref if it exists.
+            try {
+              await github.rest.git.deleteRef({
+                owner,
+                repo,
+                ref: `tags/${tag}`,
+              });
+              core.info(`Deleted tag ${tag}`);
+            } catch (error) {
+              core.info(`No tag to delete (${tag}) or delete failed: ${error.message}`);
+            }