After trying to manually download Windows updates from the Windows Update Catalog and getting page not found errors, i found out it's blocked by your list...at least i think it is because Pi-hole's log status says "Blocked (regex blacklist, CNAME)" and yours is the only regex list i use. The whole log domain entry is "catalog.s.download.windowsupdate.com (blocked scdn28557.wpc.ad629.nucdn.net)".
Anyway, the domain that needs to be whitelisted is
scdn28557.wpc.ad629.nucdn.net