xz used to be in buildInputs but was removed in commit d4d7931a (Cleanup: remove obsolete references to ‘xz’, which is in stdenv).