Update @rancher/components github action

Signed-off-by: Phillip Rak <[email protected]>

.github/workflows/release-rancher-components.yml

@@ -8,16 +8,20 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
       with:
         fetch-depth: 0
         persist-credentials: false
 
-    - uses: actions/setup-node@v2
+    - uses: actions/setup-node@v3
       with:
         node-version: '16.x'
         registry-url: 'https://registry.npmjs.org'
+        scope: '@rancher'
 
     - name: Install
       run: yarn install --frozen-lockfile