To me, the 'standard' (for some definition of standard online these days!) is for POSTs on creation, PUTs for providing whole objects for update (or creation), and PATCHes for providing partial objects for update.

In practice, I don't think it really matters as long as the request types and expected behaviour are documented appropriately.