fix: explicitly define registry/token via custom .npmrc in release action

Author: dominikg

.github/workflows/release.yml

@@ -24,7 +24,6 @@ jobs:
         uses: actions/setup-node@v2
         with:
           node-version: 14
-          registry-url: 'https://registry.npmjs.org'
       # install pnpm and try to reuse cache from ci action by using same cache keys
       - name: install pnpm
         run: npm i -g pnpm@5
@@ -57,6 +56,13 @@ jobs:
         # manually install esbuild because we deactivated postinstall scripts above
         run: node node_modules/esbuild/install.js
 
+      - name: Creating .npmrc
+        run: |
+          cat << EOF > "$HOME/.npmrc"
+            //registry.npmjs.org/:_authToken=$NPM_TOKEN
+          EOF
+        env:
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
       - name: Create Release Pull Request or Publish to npm
         id: changesets
         uses: changesets/action@master