packages_with_updates_versions_not_managed

["and",
  ["~>", "path", ["package_updates", ".*", "name"]],
  ["not",
    ["in", "value",
      ["extract", "title",
        ["select_resources",
          ["and",
            ["=", "type", "Package"],
            ["not",
              ["or",
                ["=", ["parameter", "ensure"], "absent"],
                ["=", ["parameter", "ensure"], "uninstalled"],
                ["=", ["parameter", "ensure"], "purged"],
                ["=", ["parameter", "ensure"], "present"],
                ["=", ["parameter", "ensure"], "installed"],
                ["=", ["parameter", "ensure"], "held"]
              ]
            ]
          ]
        ]
      ]
    ]
  ]
]

Note this run against the /pdb/query/v4/fact-contents endpoint.