Stop sending entire objects in your PATCH requests. There's a better way

I'll be honest — I spent years writing PATCH endpoints that just took the whole object and merged it server-side. You probably have too. It works. Until it doesn't. You get concurrent edits. You get race conditions. You get a client that sends { "role": null } because it forgot to exclude the field.