We did implement this process last year and we described it here :
But in our common use cases the best way to update form attachments will soon be datasets and entities and we will use it as soon as possible instead of API form update.