The order is random.
But you can enforce the order by 
Requires(pre): katello-common 
And I just audited the code and it should be safe.