So you want to use yum-cron to autoupdate your system but skip some packages? versionlock is the way to go.
$ sudo yum install yum-plugin-versionlock
$ sudo yum versionlock add puppet
$ sudo yum versionlock list
$ sudo yum versionlock delete 0:openldap-2.4.39-8.el6.*