The answer is... generally run updates first. Whether to import or export the configuration afterwards depends on who updated the contrib code base.
You are updating the contrib code base
If you are updating the contrib code base, run the database updates and then export the configuration, as updates tend to alter the configuration storage data which needs to be commited into the version control system:
PubDate