Though I cannot reproduce it exactly as I have already patched the build locally and resynced the tokens, looking at the data that I have it seems that the issue is with updating installations which do not have any categories attached to them.

I think it would be a good idea to initialize "categories" set with an empty set

 private Set<Category> categories = new HashSet<>();