Also, there is the setting of HTTP headers which requires JavaScript.
<input type="hidden" name="_method" value="PATCH">
The server has to support it.